Heap-based Buffer Overflow in ImageMagick Affects Image Processing Capabilities
CVE-2026-119124

4.8MEDIUM

Key Information:

Vendor

Imagemagick
Status
Imagemagick
Vendor
CVE Published:
29 October 2026

What is CVE-2026-119124?

ImageMagick versions before 7.1.2-34 have a vulnerability that allows an attacker to exploit a heap-based buffer overflow during the image processing -morph command. By supplying a specially crafted image, the attacker can manipulate memory writes to exceed the boundaries of the heap buffer. This may lead to application crashes or potential memory corruption, compromising the image processing capabilities of the software.

Affected Version(s)

ImageMagick 0 < 7.1.2-34

ImageMagick 7.1.2-34

References

https://github.com/ImageMagick/ImageMagick/security/advis...
vendor-advisory
https://www.vulncheck.com/advisories/imagemagick-before-7...
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

bewithyash
.