← Database

CVE-2026-55628

MEDIUM CVSS: 5.5 Published: 2026-07-01 Modified: 2026-07-29

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially resulting in both reading and writing to paths disallowed by the security policy. This issue has been fixed in version 7.1.2-26.

Affected Platforms

Unknown

Weakness Type

CWE-73, CWE-862

References