JLSEC-2026-1064 Medium 4.8

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and...

JLSEC Published: Jul 30, 2026
Modified: Jul 30, 2026
Severity: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Packages: ImageMagick_jll < 7.1.2028+0
Upstream: CVE-2026-61858 GHSA-26m2-2whw-vfv9 EUVD-2026-43187

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

References

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw2
https://github.com/advisories/GHSA-26m2-2whw-vfv9
https://nvd.nist.gov/vuln/detail/CVE-2026-61858
https://www.vulncheck.com/advisories/imagemagick-before-26-policy-bypass-via-apng-encoder