Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-119124

ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option

Description

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 7.1.2-34affected
  • 7.1.2-34unaffected

References