logo

Database

Out-of-bounds read In magick.net-q16-x86

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when Magick parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

1-10 of 23

10

Aliases

1. CVE-2026-338992. NVD-2026-338993. OSV-2026-338994. OSV-DEBIAN-2026-338995. GHSA-cr67-pvmx-2pp26. GCVE-2026-338997. SECURITY-TRACKER-CVE-2026-33899

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr67-pvmx-2pp22. https://github.com/ImageMagick/ImageMagick/commit/ae679e2fd19ec656bfab9f822ae4cf06bf91604d3. https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-194. https://github.com/dlemstra/Magick.NET/releases/tag/14.12.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.