High (8.8). EPSS 3.8% chance of exploitation in the next 30 days.
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)