{"id":"CVE-2026-119123","kind":"vulnerability","aliases":["CVE-2026-119123"],"related":[],"title":"ImageMagick: crafted TIFF image crashes the app via stack overflow","description":"ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing denial of service.","summary":"ImageMagick before 7.1.2-34 has a stack overflow in its TIFF decoder when the DNG decoder is disabled. An attacker who supplies a crafted image can crash the application, causing denial of service.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["image-processing","imagemagick","package"],"not_affected_if":["patched-version","trusted-input-only"],"how_to_check":"- Run `magick -version` and compare the version to `7.1.2-34`\n- Check whether the DNG decoder is disabled in the ImageMagick policy or build configuration (unknown if the sources do not say how)","fix":"- ImageMagick: move to `7.1.2-34` or later","status":"open","published_at":"2026-10-29T16:18:04+00:00","first_seen_at":"2026-10-29T16:25:58+00:00","triaged_at":"2026-10-29T16:31:30+00:00","updated_at":"2026-10-29T16:31:30+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-29T16:31:30Z","model":"claude-haiku-5-5","output":{"fix":"- ImageMagick: move to `7.1.2-34` or later","reach":"internet","title":"ImageMagick: crafted TIFF image crashes the app via stack overflow","impact":"low","summary":"ImageMagick before 7.1.2-34 has a stack overflow in its TIFF decoder when the DNG decoder is disabled. An attacker who supplies a crafted image can crash the application, causing denial of service.","audience":"developers","category":"package","nicknames":[],"who_cares":["imagemagick","image-processing"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Application crashes, causing denial of service","analyst_note":"","how_to_check":"- Run `magick -version` and compare the version to `7.1.2-34`\n- Check whether the DNG decoder is disabled in the ImageMagick policy or build configuration (unknown if the sources do not say how)","plain_action":"","needs_analyst":false,"not_affected_if":["patched-version","trusted-input-only"],"who_is_affected":"Systems that run ImageMagick before 7.1.2-34 to process image files supplied from outside, such as user uploads, are exposed. The sources describe the flaw as occurring when the DNG decoder is disabled, so the configuration matters. Teams that only process trusted local images or run a newer version can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000664,"input_tokens":4130,"output_tokens":502,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119123':13A,16A '-2026':12A,15A '-34':25B,58C '7.1.2':24B,57C 'app':7A 'applic':50B,93C 'attack':41B,76C 'caus':51B,94C 'contain':59C 'craft':2A,45B,80C 'crash':5A,48B,91C 'cve':11A,14A 'decod':33B,37B,67C,73C 'denial':52B,95C 'disabl':39B,75C 'dng':36B,72C 'file':82C 'imag':4A,18B,46B,81C 'image-process':17B 'imagemagick':1A,20B,22B,55C 'occur':69C 'overflow':10A,29B,62C,89C 'packag':21B 'process':19B,84C 'servic':54B,97C 'stack':9A,28B,61C,88C 'suppli':43B,78C 'tiff':3A,32B,66C 'trigger':86C 'via':8A 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Systems that run ImageMagick before 7.1.2-34 to process image files supplied from outside, such as user uploads, are exposed. The sources describe the flaw as occurring when the DNG decoder is disabled, so the configuration matters. Teams that only process trusted local images or run a newer version can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T16:18:04+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119123","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119123","severity":null,"published_at":"2026-10-29T16:18:04+00:00","modified_at":"2026-10-29T16:18:04+00:00","first_seen_at":"2026-10-29T16:25:58+00:00","fetched_at":"2026-10-29T16:25:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}