CVE-2026-33902Disclosure(imagemagick / imagemagick)

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-674

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • imagemagick

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Products
imagemagick

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-14: 3Technical Details · 2026-04-14: 204-14
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • DailyCVE@dailycve
    General

    🟠 ImageMagick, Stack Overflow, #CVE-2026-33902 (Moderate) https://dailycve.com/imagemagick-stack-overflow-cve-2026-33902-moderate/

    Post summary

    The post merely references CVE-2026-33902 for ImageMagick with a moderate severity tag, offering no additional technical details, PoC, exploit, or mitigation information.

    0000025
    181 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-33902 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow vulnera… https://www.cve.org/CVERecord?id=CVE-2026-33902

    Post summary

    The post reports a stack‑overflow vulnerability in older ImageMagick releases, providing version details but no exploitation or patch information.

    0000099
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-33902 Stack Overflow in ImageMagick FX Expression Parser Versions Below 7.1.2-19 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33902

    Post summary

    The post announces a stack‑overflow vulnerability in the ImageMagick FX Expression Parser affecting versions before 7.1.2-19, with a link to further details.

    0000034
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appimagemagickimagemagick---

Explore more