Low severity3.7NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-119123

Description

ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-34

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88nvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-34-stack-overflow-in-tiff-decodernvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000