alpine · CVE-2026-40169

Quick triage

Priority: not assigned Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2026-40169: 1 source package rows (imagemagick); 82 state rows across 2 repos (3.23-community, edge-community); fixed 2, open 80.

Description:

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. This issue has been fixed in version 7.1.2-19.

cvelogic Threat Intelligence