CVE-2026-62946

Summary

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27.

Affected Software

VendorProductVersion RangeStatus
ImageMagickImageMagick< 7.1.2-27affected
ImageMagickImageMagick< 6.9.13-52affected

Weaknesses

  • CWE-190: CWE-190: Integer Overflow or Wraparound

References