CVE-2026-32259

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-32259
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-49hx-7656-jpg3 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
History

18 Mar 2026, 14:29

Type Values Removed Values Added
Summary
  • (es) ImageMagick es software libre y de código abierto utilizado para editar y manipular imágenes digitales. Antes de 7.1.2-16 y 6.9.13-41, cuando una asignación de memoria falla en el codificador sixel, sería posible escribir más allá del final de un búfer en la pila. Esta vulnerabilidad está corregida en 7.1.2-16 y 6.9.13-41.
CPE cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
First Time Imagemagick
Imagemagick imagemagick
References () https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-49hx-7656-jpg3 - () https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-49hx-7656-jpg3 - Vendor Advisory

12 Mar 2026, 20:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-12 20:16

Updated : 2026-03-18 14:29

NVD link : CVE-2026-32259

Mitre link : CVE-2026-32259

CVE.ORG link : CVE-2026-32259

JSON object : View

Products Affected

imagemagick

  • imagemagick
CWE
CWE-121

Stack-based Buffer Overflow