ImageMagick CVE-2026-42050

Upgrade ImageMagick immediately to version 7.1.2-21 or later (current branch) or 6.9.13-46 or later (legacy branch), depending on your maintenance track. Users can verify their installed version with identify -version. If immediate patching is not feasible, apply compensating controls by disabling or restricting the display tool in production environments, particularly on systems that process untrusted MIFF files. For web services or batch processing pipelines using ImageMagick, consider replacing invocations of the display tool with programmatic image handling via ImageMagick's library APIs (C, Perl, PHP, Python) which do not expose the vulnerable right-click tile loading UI. If the display tool must remain accessible, implement strict file input validation and restrict opening of MIFF files from untrusted sources, or run the display tool in a sandboxed environment with limited privileges to contain the denial-of-service impact. Note that these mitigations trade usability for security; upgrading is the recommended path. Consult the GitHub security advisory at https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p for detailed release notes and additional guidance.