Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.3%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-61857


Contact Us

Shodan ® - All rights reserved