LIVE · cybersecurity feed
Live wire
cve recordmedium

CVE-2026-32636

imagemagick · imagemagick

Published
CVSS5.3
Severitymedium
WeaknessCWE-787
ExploitedNot in CISA KEV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1.2-17 and 6.9.13-42 fix the issue.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-32636

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-32636.