PT-2026-21651 · Unknown+1 · Imagemagick+1

Ylwango613

·

CVE-2026-26983

·

Published

2026-02-24

·

Updated

2026-06-17

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crash can occur in the MSL interpreter when processing an invalid <map> element. This crash is caused by the interpreter using an image after it has been freed from memory.
Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.

Exploit

Fix

DoS

Use After Free

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416CWE-476

Related Identifiers

CVE-2026-26983
ECHO-EDE7-02B4-0BA1
GHSA-W8MW-FRC6-R7M8
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
SUSE-SU-2026:0854-1

Affected Products

Imagemagick
Red Os