Heap Buffer Over-Read Vulnerability in ImageMagick Software
CVE-2026-30935
What is CVE-2026-30935?
ImageMagick is an open-source tool widely used for editing and manipulating images. A vulnerability has been identified in versions prior to 7.1.2-16, where the BilateralBlurImage function is susceptible to a heap buffer over-read due to improper conversion when processing specially crafted images using the -bilateral-blur operation. This flaw can lead to unintended access to memory locations, potentially exposing sensitive data or causing application crashes. Users of older versions are encouraged to upgrade to the latest version to safeguard against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
ImageMagick < 7.1.2-16
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved