Skip to main content

Unchecked Return Value

CVE-2026-28691

High
7.5/10

Summary

ImageMagick is free and open-source software used for editing and manipulating digital images. In ImageMagick versions prior to 6.9.13-41 and 7.x prior to 7.1.2-16 and Magick.NET versions prior to 14.10.4, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. ImageMagick versions 7.1.2-16 and 6.9.13-41 and Magick.NET version 14.10.4 contain a patch for this vulnerability.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-252 - Unchecked Return Value

The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References

Advisory Timeline

  • Published