CVE-2026-23876: Heap buffer overflow with attacker-controlled data in XBM parser
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ImageMagick XBM image decoder (ReadXBMImage)to a version that resolves this vulnerability.Fixed in 7.1.2-13 - Upgrade
Upgrade
ImageMagick XBM image decoder (ReadXBMImage)to a version that resolves this vulnerability.Fixed in 6.9.13-38
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23876?
CVE-2026-23876 is categorized as a critical severity vulnerability due to the potential for remote code execution via a heap buffer overflow.
How do I fix CVE-2026-23876?
To fix CVE-2026-23876, upgrade to ImageMagick version 7.1.2-13 or 6.9.13-38 and above.
What types of attacks can exploit CVE-2026-23876?
CVE-2026-23876 allows an attacker to execute arbitrary code on the target system through malicious XBM image files.
What software is affected by CVE-2026-23876?
CVE-2026-23876 affects ImageMagick versions prior to 7.1.2-13 and 6.9.13-38.
What impact does CVE-2026-23876 have on systems?
The impact of CVE-2026-23876 includes potential system compromise, unauthorized access, and execution of arbitrary code.