EUVD-2026-40445Published

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory …

Exact source revision recorded 1 Nov 2026 10:14:24 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

euvd · EUVD-2026-40445

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Jun 30, 2026, 10:08:36 PM

dateUpdated: Oct 29, 2026, 9:15:49 PM

5 related source bulletins · separate from aliases

openSUSE-SU-2026:21291-1: Security update for ImageMagick

CVE-2026-53466 · CVE-2026-53467 · CVE-2026-55594 · CVE-2026-55595 · CVE-2026-55597 · CVE-2026-56361 · CVE-2026-56363 · CVE-2026-56364 · CVE-2026-56374 · CVE-2026-56379

SUSE-SU-2026:3023-1: Security update for ImageMagick

CVE-2026-40169 · CVE-2026-42050 · CVE-2026-42326 · CVE-2026-45031 · CVE-2026-45358 · CVE-2026-45359 · CVE-2026-45624 · CVE-2026-45664 · CVE-2026-46520 · CVE-2026-46521 · CVE-2026-46522 · CVE-2026-46523 · CVE-2026-46557 · CVE-2026-46559 · CVE-2026-46692 · CVE-2026-46693 · CVE-2026-47165 · CVE-2026-47166 · CVE-2026-48734 · CVE-2026-48994 · CVE-2026-49218 · CVE-2026-53460 · CVE-2026-53461 · CVE-2026-53463 · CVE-2026-53464 · CVE-2026-53466 · CVE-2026-53467 · CVE-2026-55594 · CVE-2026-55595 · CVE-2026-55597 · CVE-2026-56361 · CVE-2026-56363 · CVE-2026-56364 · CVE-2026-56365 · CVE-2026-56367 · CVE-2026-56368 · CVE-2026-56370 · CVE-2026-56371 · CVE-2026-56374 · CVE-2026-56376 · CVE-2026-56379

SUSE-SU-2026:22620-1: Security update for ImageMagick

CVE-2026-53466 · CVE-2026-53467 · CVE-2026-55594 · CVE-2026-55595 · CVE-2026-55597 · CVE-2026-56361 · CVE-2026-56363 · CVE-2026-56364 · CVE-2026-56374 · CVE-2026-56379

openSUSE-SU-2026:11228-1: ImageMagick-7.1.2.27-1.1 on GA media

CVE-2026-53466 · CVE-2026-53467 · CVE-2026-55510 · CVE-2026-55577 · CVE-2026-55594 · CVE-2026-55595 · CVE-2026-55597 · CVE-2026-55628 · CVE-2026-56361 · CVE-2026-56362 · CVE-2026-56363 · CVE-2026-56364 · CVE-2026-56365 · CVE-2026-56374 · CVE-2026-56377

SUSE-SU-2026:3024-1: Security update for ImageMagick

CVE-2026-42050 · CVE-2026-42326 · CVE-2026-45031 · CVE-2026-45358 · CVE-2026-45624 · CVE-2026-45664 · CVE-2026-46520 · CVE-2026-46521 · CVE-2026-46522 · CVE-2026-46523 · CVE-2026-46692 · CVE-2026-46693 · CVE-2026-47165 · CVE-2026-47166 · CVE-2026-48994 · CVE-2026-49218 · CVE-2026-53460 · CVE-2026-53463 · CVE-2026-53466 · CVE-2026-53467 · CVE-2026-56361 · CVE-2026-56363 · CVE-2026-56365 · CVE-2026-56367 · CVE-2026-56368 · CVE-2026-56371 · CVE-2026-56379

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON