GHSA-37qc-85ph-3w7fMediumCVSS 5.1

ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability that allows attackers...

Published
October 8, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

📋 Description

ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability that allows attackers to overwrite heap memory by making a crafted call to the GetVirtualPixels API. Attackers can trigger the out-of-bounds heap write through crafted input to crash the server, causing a denial of service.

🔗 References (4)