imagemagick/imagemagick · Security
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
- GHSA ID
- GHSA-qmw5-2p58-xvrc
- CVE ID
- CVE-2026-30883
- Severity
- medium
- Published
- Updated
- CVSS
- 5.7 · CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
- CVSS v3
- 5.7 · CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Description
An extremely large image profile could result in a heap overflow when encoding a PNG image.
CWEs
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer