Heap Buffer Over-Read Vulnerability in ImageMagick Software
CVE-2026-30935

4.4MEDIUM

Key Information:

Vendor
CVE Published:
9 March 2026

What is CVE-2026-30935?

ImageMagick is an open-source tool widely used for editing and manipulating images. A vulnerability has been identified in versions prior to 7.1.2-16, where the BilateralBlurImage function is susceptible to a heap buffer over-read due to improper conversion when processing specially crafted images using the -bilateral-blur operation. This flaw can lead to unintended access to memory locations, potentially exposing sensitive data or causing application crashes. Users of older versions are encouraged to upgrade to the latest version to safeguard against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

ImageMagick < 7.1.2-16

References

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.