CVE-2026-28688

CVE-2026-28688 is a heap-use-after-free in ImageMagick’s MSL encoder where a cloned image is destroyed twice. The vulnerability affects ImageMagick prior to versions 7.1.2-16 and 6.9.13-41, and is addressed by upgrading to 7.1.2-16 or 6.9.13-41 (per the CVE description). Connected advisories (Deb...