Skip to main content

ImageMagick CVE-2026-55597

| EUVDEUVD-2026-41124 MEDIUM
Incorrect Calculation (CWE-682)
2026-07-01 GitHub_M GHSA-c4v7-w88g-m6c4
Information Disclosure Imagemagick Red Hat Suse
5.5
CVSS 3.1 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

File-based local trigger (AV:L), no privileges needed (PR:N), user must process the file (UI:R), impact confined to availability via process crash (A:H, C:N, I:N).

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Patch available
Jul 01, 2026 - 20:02 EUVD
Analysis Generated
Jul 01, 2026 - 19:38 vuln.today

DescriptionCVE.org

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.

AnalysisAI

Heap buffer over-write in ImageMagick's JP2 (JPEG 2000) encoder - present in all versions prior to 7.1.2-26 - allows an attacker to crash the process by supplying a maliciously crafted JP2 image file, resulting in a denial-of-service condition. The root cause is CWE-682 (Incorrect Calculation): argument handling logic in the JP2 encoder computes incorrect bounds, leading to an out-of-bounds heap write. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Technical ContextAI

ImageMagick is a widely-used open-source image processing suite (cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*) that supports dozens of image formats including JPEG 2000 (JP2), handled via a dedicated encoder/decoder codec path. CWE-682 (Incorrect Calculation) identifies the root cause: the JP2 encoder performs incorrect argument processing - likely miscalculating buffer sizes or stride values - which causes a write operation to exceed the bounds of a heap-allocated buffer. Heap buffer over-writes of this class can cause process termination (crash) due to heap metadata corruption; in theory they can also produce memory disclosure, which may explain the 'Information Disclosure' tag attached to this CVE, though the provided CVSS vector assigns C:N (no confidentiality impact) - a discrepancy that should be verified against the upstream GitHub advisory at GHSA-c4v7-w88g-m6c4.

RemediationAI

Upgrade to ImageMagick version 7.1.2-26 or later, which contains the vendor-confirmed fix for this issue. The upstream patch is available via the official ImageMagick GitHub repository and package managers (e.g., apt, dnf, brew) once distribution maintainers adopt the release. The advisory is at https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4. If immediate upgrade is not feasible, a practical compensating control for server-side pipelines is to disable JP2 format support by adding 'JP2 none' (or equivalent) to the ImageMagick policy.xml file; this blocks processing of JP2 inputs entirely, eliminating the attack surface at the cost of losing JPEG 2000 support. Environments that process only trusted image files from internal sources face minimal real-world risk until the patch can be applied.

More in Imagemagick

View all
CVE-2017-15277 MEDIUM POC
6.5 Oct 12

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc
CVE-2016-5841 CRITICAL POC
9.8 Dec 13

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of serv
CVE-2016-3717 MEDIUM POC
5.5 May 05

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi
CVE-2016-5118 CRITICAL
9.8 Jun 10

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbit
CVE-2016-5689 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2016-5690 CRITICAL POC
9.8 Dec 13

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to

CVE-2016-5691 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2017-14138 CRITICAL POC
9.8 Sep 04

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in cer
CVE-2026-23876 CRITICAL POC
9.8 Jan 20

Heap buffer overflow in ImageMagick's XBM image decoder (ReadXBMImage) lets remote attackers write attacker-controlled d
CVE-2023-34152 CRITICAL POC
9.8 May 30

A vulnerability was found in ImageMagick. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable
CVE-2019-19952 CRITICAL POC
9.8 Dec 24

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to R
CVE-2018-14551 CRITICAL POC
9.8 Jul 23

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory cor

Same weakness CWE-682 – Incorrect Calculation

View all
CVE-2021-44847 CRITICAL POC
9.8
CVE-2022-23066 CRITICAL POC
9.1
CVE-2022-28048 HIGH POC
8.8
CVE-2020-0022 HIGH POC
8.8
CVE-2019-16346 HIGH POC
8.8
CVE-2023-42460 HIGH POC
7.5
CVE-2022-22138 HIGH POC
7.5
CVE-2022-30780 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Fixed

Share

CVE-2026-55597 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy