Cloudanix VulnDB

CVE-2026-119124

Low · 3.3

CVSS

3.3

EPSS

0.1%

Published

Oct 29, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A flaw in a popular image processing tool can make it crash when someone tries to work with certain specially made pictures.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Low
Impact
Denial Of Service
Component
Library
Class
Buffer Overflow
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Heap-based buffer overflow in ImageMagick -morph processing allows out-of-bounds writes when handling specially crafted images, resulting in heap memory corruption and application crash.

Why it matters to the business

Organizations relying on ImageMagick for image processing may experience unexpected application crashes when users handle untrusted images with the -morph option, leading to disrupted workflows and potential data loss in automated pipelines.

How an attack unfolds

An attacker crafts a malicious image file and delivers it to a victim who processes it using ImageMagick with the -morph option; the buffer overflow corrupts heap memory and terminates the process.

How to fix it

Upgrade ImageMagick to version 7.1.2-34 or later. Avoid processing untrusted images with the -morph option until patched. Monitor vendor advisories for distribution-specific packages.

How to confirm the fix worked

Confirm the installed ImageMagick version is 7.1.2-34 or higher using the identify -version command. Test processing of sample images with -morph to verify stability. Review build logs or package managers for the updated release.

Typical attack path

  1. Attacker creates a malformed image exploiting -morph buffer handling
  2. Attacker delivers the image via email, web download, or shared storage
  3. Victim or automated process opens or converts the image using the -morph option
  4. Overflow occurs, corrupting heap memory and crashing the ImageMagick process

How to detect it

Review application and system logs for ImageMagick segmentation faults or crashes during image processing jobs around the time untrusted files were handled. Correlate with file access timestamps for images processed via command-line tools or scripts.

What your security team should do

  • Prioritize patching ImageMagick installations to 7.1.2-34 or newer within standard change windows given the recent publication
  • Restrict use of the -morph option to trusted image sources in scripts and applications
  • Update vulnerability scanning tools to detect pre-7.1.2-34 versions across the environment

The record

ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities