Log in Start free

Vulnerability · Published Jan 22, 2026 · Assigned by GitHub_M

CVE-2026-23952ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

Medium 6.5

In plain English

A medium-severity null pointer dereference in ImageMagick from ImageMagick. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 59.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12imagemagick8:6.9.11.60+dfsg-1.6+deb12u6DSA-6111-1
Debian:12imagemagick8:6.9.11.60+dfsg-1.6+deb12u6DEBIAN-CVE-2026-23952
Debian:13imagemagick8:7.1.1.43+dfsg1-1+deb13u5DSA-6111-1
Debian:13imagemagick8:7.1.1.43+dfsg1-1+deb13u5DEBIAN-CVE-2026-23952
Debian:14imagemagick8:7.1.2.13+dfsg1-1DEBIAN-CVE-2026-23952
NuGetmagick.net-q16-anycpu14.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-anycpu14.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-openmp-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-openmp-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-hdri-x8614.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-openmp-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-openmp-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-openmp-x8614.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q16-x8614.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-anycpu14.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-openmp-arm6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-openmp-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-x6414.10.2GHSA-5vx3-wx4q-6cj8
NuGetmagick.net-q8-x8614.10.2GHSA-5vx3-wx4q-6cj8
Ubuntu:25.10imagemagickno fix listedUBUNTU-CVE-2026-23952

Affected products (as reported)

VendorProductVersions
ImageMagick ImageMagick < 14.10.2

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References