Fluid Attacks Database

Description

ImageMagick has an out-of-bounds read in sample operation The -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
nuget	magick.net-q8-openmp-x64	>=0 <14.12.0	14.12.0
debian 12	imagemagick	=8:6.9.11.60+dfsg-1.6 \|\| =8:6.9.11.60+dfsg-1.6+deb12u1 \|\| =8:6.9.11.60+dfsg-1.6+deb12u2 \|\| =8:6.9.11.60+dfsg-1.6+deb12u3 \|\| =8:6.9.11.60+dfsg-1.6+deb12u4 \|\| =8:6.9.11.60+dfsg-1.6+deb12u5 \|\| =8:6.9.11.60+dfsg-1.6+deb12u6 \|\| =8:6.9.11.60+dfsg-1.6+deb12u7 \|\| =8:6.9.11.60+dfsg-1.6+deb12u8 \|\| >=0 <8:6.9.11.60+dfsg-1.6+deb12u9	8:6.9.11.60+dfsg-1.6+deb12u9
debian 14	imagemagick	=8:7.1.1.43+dfsg1-1 \|\| =8:7.1.1.46+dfsg1-1 \|\| =8:7.1.1.47+dfsg1-1 \|\| =8:7.1.1.47+dfsg1-2 \|\| =8:7.1.2.1+dfsg1-1 \|\| =8:7.1.2.12+dfsg1-1 \|\| =8:7.1.2.13+dfsg1-1 \|\| =8:7.1.2.15+dfsg1-1 \|\| =8:7.1.2.15+dfsg1-2 \|\| =8:7.1.2.16+dfsg1-1 \|\| =8:7.1.2.18+dfsg1-1 \|\| =8:7.1.2.3+dfsg1-1 \|\| =8:7.1.2.7+dfsg1-1 \|\| =8:7.1.2.8+dfsg1-1 \|\| >=0 <8:7.1.2.19+dfsg1-1	8:7.1.2.19+dfsg1-1
nuget	magick.net-q16-arm64	>=0 <14.12.0	14.12.0
nuget	magick.net-q16-anycpu	>=0 <14.12.0	14.12.0
nuget	magick.net-q16-hdri-arm64	>=0 <14.12.0	14.12.0
nuget	magick.net-q16-x64	>=0 <14.12.0	14.12.0
nuget	magick.net-q8-x64	>=0 <14.12.0	14.12.0
rpm rhel6	ImageMagick	-	-
rpm rhel7	ImageMagick	-	-

1-10 of 22

Aliases

1. CVE-2026-339052. NVD-2026-339053. OSV-2026-339054. OSV-DEBIAN-2026-339055. GHSA-pcvx-ph33-r5vv6. GCVE-2026-339057. SECURITY-TRACKER-CVE-2026-33905

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pcvx-ph33-r5vv2. https://github.com/ImageMagick/ImageMagick/commit/cca607366fb38c2dde019a9088b8415ffba3a8353. https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-194. https://github.com/dlemstra/Magick.NET/releases/tag/14.12.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.