CVE-2026-27799 ImageMagick has a heap Buffer Over-read in its DJVU image format handler
An attacker can trigger a heap buffer over-read in ImageMagick's DJVU handler via integer truncation, potentially causing crashes or leaking memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-27799?
CVE-2026-27799 is a medium-severity vulnerability in Imagemagick Imagemagick, published on 25 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Which versions are affected by CVE-2026-27799?
38 open source packages ship an affected version, including Magick.NET-Q16-AnyCPU, Magick.NET-Q16-HDRI-AnyCPU and Magick.NET-Q16-HDRI-OpenMP-arm64. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
Magick.NET-Q16-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q16-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-OpenMP-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-OpenMP-arm64 NuGet | All versions | 14.10.3 |
32 more packages
Magick.NET-Q16-HDRI-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-HDRI-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-OpenMP-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q16-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q8-AnyCPU NuGet | All versions | 14.10.3 |
Magick.NET-Q8-OpenMP-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-OpenMP-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-OpenMP-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-arm64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-x64 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-x86 NuGet | All versions | 14.10.3 |
Magick.NET-Q8-x86 NuGet | All versions | 14.10.3 |
Products include Dlemstra Magick.net, Imagemagick Imagemagick.
How do I fix CVE-2026-27799?
Upgrade Magick.NET-Q16-AnyCPU to 14.10.3 or later.
Is CVE-2026-27799 being exploited?
There is no known exploitation of CVE-2026-27799 in the wild and no public exploit code.
Other vulnerabilities in Imagemagick Imagemagick
- CVE-2026-24485 ImageMagick: Infinite loop vulnerability when parsing a PCD file
- CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
- CVE-2026-24484 ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
- CVE-2026-25637 ImageMagick: Possible memory leak in ASHLAR encoder
- CVE-2026-25576 ImageMagick: Out of bounds read in multiple coders read raw pixel data
Sources
Also known as DEBIAN-CVE-2026-27799, ECHO-352a-f5fb-acf4, GHSA-r99p-5442-q2x2, JLSEC-2026-971, MINI-7986-787v-wfc3, UBUNTU-CVE-2026-27799.