CVE-2026-23874

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H                                    

Vulnerability Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when writing to MSL format. Version 7.1.2-13 fixes the issue.

Vulnerability Details

Published Date

January 21, 2026

Last Modified

January 26, 2026

CWE ID

CWE-835

Source

GitHub

Vendor

nuget

Product

Magick.NET-Q8-x64

External References

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9vj4-wc7r-p844
https://nvd.nist.gov/vuln/detail/CVE-2026-23874
https://github.com/dlemstra/Magick.NET/releases/tag/14.10.2
https://github.com/advisories/GHSA-9vj4-wc7r-p844

CVE-2026-23874

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment