github.com
https://github.com/ImageMagick/ImageMagick CVE-2026-33535
MEDIUM
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Record summary
CVE-2026-33535 has a selected CVSS score of 4.0 (medium).
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 27, 2026 · Source: CVE List
Affected products and versions
Showing 12 of 19| Product | Source | Version range | Status |
|---|---|---|---|
ImageMagickBrowse ImageMagick / ImageMagick | CVE List | < 7.1.2-18 | affected |
| < 6.9.13-43 | affected | ||
Magick.NET-Q16-AnyCPUBrowse NuGet / Magick.NET-Q16-AnyCPU | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-HDRI-AnyCPUBrowse NuGet / Magick.NET-Q16-HDRI-AnyCPU | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-HDRI-OpenMP-arm64Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-HDRI-arm64Browse NuGet / Magick.NET-Q16-HDRI-arm64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-HDRI-x64Browse NuGet / Magick.NET-Q16-HDRI-x64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-HDRI-x86Browse NuGet / Magick.NET-Q16-HDRI-x86 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-OpenMP-arm64Browse NuGet / Magick.NET-Q16-OpenMP-arm64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-OpenMP-x64Browse NuGet / Magick.NET-Q16-OpenMP-x64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-OpenMP-x86Browse NuGet / Magick.NET-Q16-OpenMP-x86 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-arm64Browse NuGet / Magick.NET-Q16-arm64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
Magick.NET-Q16-x64Browse NuGet / Magick.NET-Q16-x64 | GitHub Advisory | Before 14.11.1 · Fixed in 14.11.1 | affected |
References
3github.comConfirmation
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mw3m-pqr2-qv7c nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-33535