Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

ImageMagick BMP files can cause crashes or code execution

published 4 days ago
Summary

The ImageMagick software that handles BMP image files has a memory handling error. This can allow an attacker to make the program stop working or run their own code when a crafted BMP image is processed. Apply the latest ImageMagick update or patch to fix the issue.

What to do
  • Update cleanstart imagemagick to version 7.1.1.21-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart imagemagick < 7.1.1.21-r0
Fix: upgrade to 7.1.1.21-r0
Original advisory text
heap use-after-free flaw was found in coders/bmp
Security vulnerability affects the imagemagick package. A heap use-after-free flaw was found in coders/bmp.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
Track software like this
Free during beta