yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2026-46523
Component Overview
Vulnerability Overview
Name
CVE-2026-46523
Source
NVD (
link
)
Debian (
link
)
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image can trigger a heap-use-after-free. Versions 7.1.2.23 and 6.9.13-48 fix the issue.
CWEs
CWE-416
Published Date
Jun 10, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5r4x-w6p5-222q
Vendor Advisory
Analysis
#
Affected Component
Analysis
imagemagick
Exploitable
Vulnerability Ratings
#
6.2
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
imagemagick
buildroot
2025.02.x
7.1.2-23
Not Affected
imagemagick
buildroot
master
7.1.2-23
Not Affected
imagemagick
openwrt
master
7.1.2.21-r1
Not Affected
imagemagick
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
imagemagick
yocto
master
7.1.2-25
Not Affected
imagemagick
yocto
scarthgap
7.1.1-47
Exploitable