Integer Overflow Vulnerability in ImageMagick Affects Various Digital Image Handling Versions

CVE-2026-34238

What is CVE-2026-34238?

ImageMagick, a widely used free and open-source software for editing and manipulating digital images, has a critical vulnerability linked to an integer overflow during its despeckle operation. This defect causes a heap buffer overflow in 32-bit builds, allowing attackers to execute an out-of-bounds write. This could potentially compromise the integrity of the application and its data. The issue has been addressed in versions 6.9.13-44 and 7.1.2-19, making it essential for users to update their software to mitigate the risk.

References