Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versions 6.9.13-48 and 7.1.2-23.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-47166 Heap Buffer Over-Read in ImageMagick Distribute-Cache Service Prior to 6.9.13-48 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47166
Post summary
The text announces a heap buffer over‑read vulnerability (CVE-2026-47166) affecting ImageMagick Distribute‑Cache Service before version 6.9.13‑48, with no mention of PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | imagemagick | imagemagick | - | - | - |