CVE-2026-42050CWE-121

ImageMagick: Stack buffer overflow in XTileImage

Medium · published May 11, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerability is fixed in 7.1.2-21 and 6.9.13-46.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-05-11T19:46Z
EPSS history
Timeline
  • 11 MAY 19:46Z
    ImageMagick: Stack buffer overflow in XTileImage
    cvelistv5