Skip to content
fr Sign in
4.8 Medium

CVE-2026-119124 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause…

Description

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.

Affected products and versions

Product Affected versions Fixed in
ImageMagick 7.1 earliest → < 7.1.2-34 7.1.2-34

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ImageMagick

The 276 CVEs of ImageMagick →
CVE-2026-123273 ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder 7.1 High CVE-2026-119123 ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder 6.3 Medium CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate 4.8 Medium CVE-2026-116158 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup… 2.0 Low
Track this CVE