GHSA-g5j8-ff59-wp88: ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder

Published Oct 29, 2026

Updated

ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ImageMagick to a version that resolves this vulnerability.
Fixed in 7.1.2-34

Event History

Oct 29, 2026

CVE Published

via OSV·03:58 PM

Data Sourced

via OSV·03:58 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What configuration condition makes this vulnerability reachable?

The stack overflow occurs when the DNG decoder is disabled. Systems processing TIFF images under that condition are affected if they use an ImageMagick version before 7.1.2-34.

What must an attacker do to trigger the issue?

An attacker must provide a crafted image file that is processed by the affected TIFF decoder. No attacker privileges or user interaction are required according to the supplied severity vector.

What is the practical impact of successful exploitation?

Successful exploitation can crash the application processing the image, resulting in denial of service. The provided impact vector indicates availability impact is limited and does not indicate confidentiality or integrity impact.

How can I determine whether an environment is affected?

Check whether ImageMagick is older than 7.1.2-34, whether it processes TIFF image files from untrusted sources, and whether its DNG decoder is disabled. All of these conditions are relevant to exposure.

GHSA-g5j8-ff59-wp88: ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder

Remediation

Event History

Frequently Asked Questions

What configuration condition makes this vulnerability reachable?

What must an attacker do to trigger the issue?

What is the practical impact of successful exploitation?

How can I determine whether an environment is affected?

Company

Resources

Contact

Frequently Asked Questions

What configuration condition makes this vulnerability reachable?

What must an attacker do to trigger the issue?

What is the practical impact of successful exploitation?

How can I determine whether an environment is affected?