ImageMagick CVE-2026-40311

Exploitation requires that a crafted image file containing an invalid or malformed XMP metadata profile be processed by a vulnerable ImageMagick instance. The CVSS vector AV:L/UI:R confirms two concrete limiting factors: the attack is local (the crafted file must reach the system's filesystem or processing queue), and user or process interaction is required to trigger parsing (the image must be actively opened, converted, or inspected). No special configuration, non-default feature flags, or elevated privileges are needed - default XMP metadata parsing behavior is sufficient to trigger the flaw. Exploitation is bounded to denial of service (process crash); no conditions enabling code execution or data leakage have been identified from available data. The 'Automatable: no' SSVC determination confirms this cannot be triggered at scale via unauthenticated network scanning.

The CVSS 3.1 base score of 5.5 (Medium) is well-calibrated for this issue: AV:L limits exploitation to scenarios where a crafted file reaches the processing system, UI:R requires human or automated interaction to open the file, and the impact is confined to availability (A:H) with no confidentiality or integrity exposure. EPSS at 0.01% (3rd percentile) is among the lowest risk tiers and is consistent with SSVC's 'Exploitation: none' determination and 'Automatable: no' rating - this cannot be exploited by network scanners or bulk targeting. There is no CISA KEV listing and no identified public proof-of-concept. The use-after-free root cause (CWE-416) raises the theoretical ceiling - use-after-frees can sometimes be upgraded to code execution - but no such exploitation path has been demonstrated or inferred from available data. Real-world risk is highest for image processing pipelines that ingest untrusted user-supplied files (e.g., web upload services, batch converters), where a crash could cause availability disruption. For environments with controlled image inputs, operational priority is low.

An attacker crafts an image file containing a structurally invalid XMP metadata profile and delivers it to a target user or automated image processing pipeline (for example, via a web file upload form or email attachment). When the image is processed by a vulnerable ImageMagick version, GetXMPProperty() accesses already-freed heap memory while iterating over XMP node values, causing a process crash and denial of service. No public proof-of-concept has been identified, and the local file delivery requirement prevents direct network-based exploitation without a separate upload or delivery mechanism.