{"id":"CVE-2026-23876","title":"ImageMagick is free and open-source software used for editing and manipulating digital images","summary":"ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to w…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122","CWE-190","CWE-787"],"vendor":"imagemagick","product":"imagemagick","affected":["imagemagick < 6.9.13-38","imagemagick >= 7.0.0-0, < 7.1.2-13"],"patched":["imagemagick 7.1.2-13"],"published":"2026-01-20","updated":"2026-06-30","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-23876","references":[{"url":"https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8","label":"security-advisories@github.com"},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8","label":"security-advisories@github.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:3058","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-23876","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431038","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23876.json","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"tags":["nvd"],"epss":0.00663,"epssPercentile":0.50261,"ingestedAt":"2026-06-30T13:26:50.517Z","slug":"CVE-2026-23876","body":"## Overview\n\nImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.\n\n## Affected\n\n- `imagemagick < 6.9.13-38`\n- `imagemagick >= 7.0.0-0, < 7.1.2-13`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `imagemagick 7.1.2-13`","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}