CVE-2026-23874
published 2026-01-20CVE-2026-23874: ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite…
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.7th percentile
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format. Version 7.1.2-13 fixes the issue.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | imagemagick | < imagemagick 8:6.9.11.60+dfsg-1.6+deb12u6 (bookworm) | imagemagick 8:6.9.11.60+dfsg-1.6+deb12u6 (bookworm) |
| imagemagick | imagemagick | < 7.1.2-13 | 7.1.2-13 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.60+dfsg-1.3+deb11u9 | 8:6.9.11.60+dfsg-1.3+deb11u9 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.60+dfsg-1.6+deb12u6 | 8:6.9.11.60+dfsg-1.6+deb12u6 |
| imagemagick | imagemagick | >= 0 < 8:7.1.1.43+dfsg1-1+deb13u5 | 8:7.1.1.43+dfsg1-1+deb13u5 |
| imagemagick | imagemagick | >= 0 < 8:7.1.2.13+dfsg1-1 | 8:7.1.2.13+dfsg1-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command
vendor_redhat·2026-01-20·CVSS 5.5
CVE-2026-23874 [MEDIUM] CWE-835 ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command
ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL command
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format. Version 7.1.2-13 fixes the issue.
A flaw was found in ImageMagick. A local user could exploit this vulnerability by providing a specially crafted Magick Scripting Language (MSL) file. This file, when processed, could trigger infinite recursion within the `` command, leading to a stack overflow. Successful exploitation results in a Denial of Service (DoS) condition, making the application unavailable.
Statement: This vulnerability is rated Moderate for Red Hat products.
Debian
CVE-2026-23874: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...
vendor_debian·2026·CVSS 5.5
CVE-2026-23874 [MEDIUM] CVE-2026-23874: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format. Version 7.1.2-13 fixes the issue.
Scope: local
bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.6+deb12u6)
bullseye: resolved (fixed in 8:6.9.11.60+dfsg-1.3+deb11u9)
forky: resolved (fixed in 8:7.1.2.13+dfsg1-1)
sid: resolved (fixed in 8:7.1.2.13+dfsg1-1)
trixie: resolved (fixed in 8:7.1.1.43+dfsg1-1+deb13u5)
GHSA
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
ghsa·2026-01-21
CVE-2026-23874 [MEDIUM] CWE-835 ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
## Summary
Stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format.
## Version
- ImageMagick 7.x (tested on current main branch)
- Commit: HEAD
- Requires: libxml2 support (for MSL parsing)
## Steps to Reproduce
### Method 1: Using ImageMagick directly
```bash
magick MSL:recursive.msl out.png
```
### Method 2: Using OSS-Fuzz reproduce
```bash
python3 infra/helper.py build_fuzzers imagemagick
python3 infra/helper.py reproduce imagemagick msl_fuzzer recursive.msl
```
Or run the fuzzer directly:
```bash
./msl_fuzzer recursive.msl
```
## Expected Behavior
ImageMagick should handle recursive MSL references gracefully by detecting the loop and returning an
OSV
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
osv·2026-01-21
CVE-2026-23874 [MEDIUM] ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
## Summary
Stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format.
## Version
- ImageMagick 7.x (tested on current main branch)
- Commit: HEAD
- Requires: libxml2 support (for MSL parsing)
## Steps to Reproduce
### Method 1: Using ImageMagick directly
```bash
magick MSL:recursive.msl out.png
```
### Method 2: Using OSS-Fuzz reproduce
```bash
python3 infra/helper.py build_fuzzers imagemagick
python3 infra/helper.py reproduce imagemagick msl_fuzzer recursive.msl
```
Or run the fuzzer directly:
```bash
./msl_fuzzer recursive.msl
```
## Expected Behavior
ImageMagick should handle recursive MSL references gracefully by detecting the loop and returning an
OSV
CVE-2026-23874: ImageMagick is free and open-source software used for editing and manipulating digital images
osv·2026-01-20·CVSS 5.5
CVE-2026-23874 [MEDIUM] CVE-2026-23874: ImageMagick is free and open-source software used for editing and manipulating digital images
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format. Version 7.1.2-13 fixes the issue.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-23874 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 5.5
CVE-2026-23874 [MEDIUM] CVE-2026-23874 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-23874 :
C# vulnerability analysis and mitigation
Source : NVD
## 5.5
Score
Published January 20, 2026
Severity MEDIUM
CNA Score 5.5
Affected Technologies
C#
ImageMagick
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 5.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
Magick.NET-Q8-OpenMP-x64
Magick.NET-Q16-HDRI-arm64
Sources
Alpine 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, edge Severity MEDIUM No Fix Added at: Jan 29, 2026
Chainguard Has Fix Added at: Jan 21, 2026
Debian 11, 12, 13, 14 Severity MEDIUM Has Fix Added at: Jan 21, 2026
Echo Severity MEDIUM Has Fix Added at: Jan 21, 2026
NuGet Severity MED
Bugzilla
CVE-2026-23874 ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command [fedora-42]
bugzilla·2026-01-20·CVSS 5.5
CVE-2026-23874 [MEDIUM] CVE-2026-23874 ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL <write> command [fedora-42]
CVE-2026-23874 ImageMagick: ImageMagick: Denial of Service via infinite recursion in MSL command [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintain
2026-01-20
Published