CVE-2026-40310 | ImageMagick up to 6.9.13-43/7.1.2-18 JP2 Encoder heap-based overflow (GHSA-pwg5-6jfc-crvh)

A vulnerability marked as critical has been reported in ImageMagick up to 6.9.13-43/7.1.2-18. Impacted is an unknown function of the component JP2 Encoder. The manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2026-40310. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More