VulnSocial

CVE-2026-24481Disclosure(imagemagick / imagemagick)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD (Adobe Photoshop) format handler. When processing a maliciously crafted PSD file containing ZIP-compressed layer data that decompresses to less than the expected size, uninitialized heap memory is leaked into the output image. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

imagemagick CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • imagemagick

Threat summary

  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 3d ago at 1 mentions (2026-02-24); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
imagemagick
Products
imagemagick

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-02-24: 1Mentions · 2026-02-27: 1Mentions · 2026-02-28: 1Mentions · 2026-03-01: 1Technical Details · 2026-02-24: 1Technical Details · 2026-02-27: 1Technical Details · 2026-02-28: 1Technical Details · 2026-03-01: 102-2402-2702-2803-01
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-241
Disclosure1
2026-02-271
General1
2026-02-281
General1
2026-03-011
Disclosure1
Full discourse4 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-24481 (CVSS:7.5, HIGH) is Analyzed. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24481 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post references CVE-2026-24481, noting its CVSS score and affected ImageMagick versions, but provides no evidence of PoC, exploit, or patch.

    0000025
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-24481 (CVSS:7.5, HIGH) is Analyzed. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24481 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces a high‑severity CVE in ImageMagick and links to the NVD, but provides no additional details such as PoC, exploit code, or patch information.

    0000024
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-24481 (CVSS:7.5, HIGH) is Analyzed. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24481 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post references CVE-2026-24481 for ImageMagick, noting its CVSS score but provides no further technical or mitigation details.

    0000023
    173 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-24481 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure… https://www.cve.org/CVERecord?id=CVE-2026-24481

    Post summary

    CVE-2026-24481 is a heap information disclosure in ImageMagick affecting versions prior to 7.1.2-15 and 6.9.13-40, with no PoC, exploit, or patch details provided.

    00000153
    56.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appimagemagickimagemagick---

Explore more

Back to dashboardimagemagick CVEsimagemagick vulnerabilities