CVE-2026-119123 — Vulnerability intelligence

imagemagick — imagemagick

Published: 2026-10-29T16:18:04.847

CVSS

6.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.

Sources

• CVE-2026-119123
• Vendor Advisory
• Third Party Advisory