CVE-2026-24485Disclosure(dlemstra / imagemagick)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch dlemstra imagemagick systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

dlemstra CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/ImageMagick/ImageMagick/commit/332c1566acc2de77857032d3c2504ead6210ff50

Vendor / third-party advisories

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85

Other references

https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

imagemagick
magick.net

Threat summary

Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 3d ago at 1 mentions (2026-02-24); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

dlemstra imagemagick

Products

imagemagickmagick.net

Deep dive

Activity timeline4 mentions / 4d

Signal classification3 categories

Disclosure

250.0%

Patch

125.0%

General

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	1	Patch1
2026-02-27	1	General1
2026-02-28	1	Disclosure1
2026-03-01	1	Disclosure1

Full discourse4 posts

CRAC Learning - Tech@cracbot222d
Disclosure
CVE-2026-24485 (CVSS:7.5, HIGH) is Analyzed. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24485 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-24485 affecting ImageMagick, noting its CVSS score and affected versions, but provides no PoC, exploit, or patch details.
0000023
173 followersView on X
CRAC Learning - Tech@cracbot223d
Disclosure
CVE-2026-24485 (CVSS:7.5, HIGH) is Analyzed. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24485 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
This post merely notes that CVE-2026-24485, a high‑severity vulnerability in ImageMagick, is documented on the NVD, without providing additional technical, exploit, or mitigation information.
0000022
173 followersView on X
CRAC Learning - Tech@cracbot224d
General
CVE-2026-24485 (CVSS:7.5, HIGH) is Undergoing Analysis. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1..https://nvd.nist.gov/vuln/detail/CVE-2026-24485 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A brief notice that CVE‑2026‑24485, a high‑severity vulnerability in ImageMagick affecting versions before 7.1.2‑1, is under analysis, with a link to the NVD entry.
0000027
173 followersView on X
CVE@CVEnew227d
Patch
CVE-2026-24485 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not cont… https://www.cve.org/CVERecord?id=CVE-2026-24485
Post summary
CVE-2026-24485 affects older ImageMagick releases; newer versions 7.1.2-15 and 6.9.13-40 are not vulnerable, indicating a patch is available.
00000143
56.5K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dlemstra	magick.net	-	-	-
App	imagemagick	imagemagick	-	-	-

Explore more

Back to dashboard dlemstra CVEs imagemagick CVEs imagemagick vulnerabilities

What researchers are saying

CVE-2026-24485

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-24485 affecting ImageMagick, noting its CVSS score and affected versions, but provides no PoC, exploit, or patch details.

CRAC Learning - Tech@cracbotDisclosure

This post merely notes that CVE-2026-24485, a high‑severity vulnerability in ImageMagick, is documented on the NVD, without providing additional technical, exploit, or mitigation information.

CRAC Learning - Tech@cracbotGeneral

A brief notice that CVE‑2026‑24485, a high‑severity vulnerability in ImageMagick affecting versions before 7.1.2‑1, is under analysis, with a link to the NVD entry.

CVE@CVEnewPatch

CVE-2026-24485 affects older ImageMagick releases; newer versions 7.1.2-15 and 6.9.13-40 are not vulnerable, indicating a patch is available.