Vulnerability · Published Feb 25, 2026 · Assigned by GitHub_M
CVE-2026-27799ImageMagick has a heap Buffer Over-read in its DJVU image format handler
Medium 4.0
In plain English
A medium-severity heap buffer overflow in ImageMagick from ImageMagick. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.22 | imagemagick | 7.1.2.15-r0 | ALPINE-CVE-2026-27799 |
| Alpine:v3.23 | imagemagick | 7.1.2.15-r0 | ALPINE-CVE-2026-27799 |
| Alpine:v3.24 | imagemagick | 7.1.2.15-r0 | ALPINE-CVE-2026-27799 |
| Debian:12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u7 | DSA-6159-1 |
| Debian:12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u7 | DEBIAN-CVE-2026-27799 |
| Debian:13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u6 | DSA-6158-1 |
| Debian:13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u6 | DEBIAN-CVE-2026-27799 |
| Debian:14 | imagemagick | 8:7.1.2.15+dfsg1-1 | DEBIAN-CVE-2026-27799 |
| NuGet | magick.net-q16-anycpu | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-anycpu | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-openmp-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-openmp-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-hdri-x86 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-openmp-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-openmp-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-openmp-x86 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q16-x86 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-anycpu | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-openmp-arm64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-openmp-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-x64 | 14.10.3 | GHSA-r99p-5442-q2x2 |
| NuGet | magick.net-q8-x86 | 14.10.3 | GHSA-r99p-5442-q2x2 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ImageMagick | ImageMagick | < 6.9.13-40>= 7.0.0, < 7.1.2-15 |
Weakness: CWE-122, CWE-126 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L