CVE-2026-40169: imagemagick Heap-based Buffer Overflow
CVSS: 6.2v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-40169DEBIAN-CVE-2026-40169CGA-3vhw-xmj6-pxjwCGA-cg44-p2w5-v9ghCGA-cg82-f7w5-4937CGA-g4f4-9x6j-h3r2CGA-p66h-978c-7j53GHSA-5592-p365-24xhCGA-q57q-9582-qf2pCGA-qv3x-hfq6-jmx7CGA-x7g3-qx59-2jf3
Published 13-04-2026Last modified 14-04-2026
Vulnerability summary
CVE-2026-40169 is a medium (CVSS 6.2) Heap-based Buffer Overflow vulnerability in imagemagick. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.1% of scored vulnerabilities.
CVSS score
6.2/10
010
Medium · v3.1 (CVE.org)EPSS score
0.19%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 9 · Related 10Timeline
- 13-04-2026PublishedVulnerability first disclosed.
- 14-04-2026Last modifiedVulnerability information updated.
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. This issue has been fixed in version 7.1.2-19.
CVSS metrics
6 scores · 6 sources · 1 versionMedium 6.2Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSources6 sources · 5.5–6.2
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · ChainguardEcosystem advisory · calculated6.2MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · NugetEcosystem advisory · calculated6.2MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
8%
Versus all other CVEs
30-day change
+0.01 pp
From 0.18% on 18-09-2026
18-09-202618-10-2026
EPSS score0.19%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
NuGet17 products
- magick.net-q16-anycpu< 14.12.0
- Magick.NET-Q16-arm64< 14.12.0
- magick.net-q16-hdri-anycpu< 14.12.0
- Magick.NET-Q16-HDRI-arm64< 14.12.0
- Magick.NET-Q16-HDRI-OpenMP-arm64< 14.12.0
Chainguard4 products
- imagemagick-6All versions (No fix recorded)
- imagemagick-6-dev< 6.9.13.46-r1
- imagemagick-6-doc< 6.9.13.46-r1
- imagemagick-6-static< 6.9.13.46-r1
Debian1 product
- imagemagick< 8:7.1.1.43+dfsg1-1+deb13u8 | < 8:7.1.2.19+dfsg1-1
Imagemagick1 product
- imagemagick< 7.1.2-19
Ubuntu1 product
- imagemagickAll versions (No fix recorded)
5 vendors · 24 products
References
10 links- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5592-p365-24xhX Refsource CONFIRMREPORTAdvisoryWEBVendor Advisory
- github.com/ImageMagick/ImageMagick/commit/f86452a8aea37bf2b4bd36127f836dcc5f138b38X Refsource MISCREPORTFIXWEBPatch
