CVE-2026-30931
Medium · 6.8CVSS
6.8
EPSS
0.2%
Published
Mar 10, 2026
CISA due date
—
The record
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, a heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write. This vulnerability is fixed in 7.1.2-16.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Leap 16.0 | ImageMagick | 0 | 7.1.2.0-160000.7.1 |
| openSUSE:Tumbleweed | ImageMagick | 0 | 7.1.2.17-1.1 |
Related vulnerabilities
- CVE-2026-56368 ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that… Also affects ImageMagick
- CVE-2026-56370 ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in… Also affects ImageMagick
- CVE-2026-56371 ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when… Also affects ImageMagick
- CVE-2026-56376 ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta… Also affects ImageMagick
- CVE-2026-56367 ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in… Also affects ImageMagick
- CVE-2026-53463 ImageMagick is free and open-source software used for editing and manipulating digital… Also affects ImageMagick
- CVE-2026-53460 ImageMagick is free and open-source software used for editing and manipulating digital… Also affects ImageMagick
- CVE-2026-53461 ImageMagick is free and open-source software used for editing and manipulating digital… Also affects ImageMagick