A flaw was found in ImageMagick. An attacker could exploit this vulnerability by supplying a specially crafted GIF file to be processed by the application. During processing, the GIF decoder reads uninitialized heap memory and writes it into the image metadata, resulting in sensitive information disclosure.
Last checked: 2026-10-15 16:19 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 19:33 UTC)
Fix evidence last checked: 2026-10-15 15:54 UTC