ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.
{
"cna_assigner": "VulnCheck",
"cwe_ids": [
"CWE-416"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93586.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "6.9.13-56"
}
],
"source": "AFFECTED_FIELD"
}
]
}