CVE-2026-30883
published 2026-03-10CVE-2026-30883: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large…
PriorityP343high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.12%
2.5th percentile
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | imagemagick | < imagemagick 8:7.1.2.16+dfsg1-1 (forky) | imagemagick 8:7.1.2.16+dfsg1-1 (forky) |
| imagemagick | imagemagick | < 6.9.13-41 | 6.9.13-41 |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | >= 0 < 8:7.1.1.43+dfsg1-1+deb13u7 | 8:7.1.1.43+dfsg1-1+deb13u7 |
| imagemagick | imagemagick | >= 0 < 8:7.1.2.16+dfsg1-1 | 8:7.1.2.16+dfsg1-1 |
| imagemagick | imagemagick | >= 0 < 8:6.7.7.10-6ubuntu3.13+esm20 | 8:6.7.7.10-6ubuntu3.13+esm20 |
| imagemagick | imagemagick | >= 0 < 8:6.8.9.9-7ubuntu5.16+esm19 | 8:6.8.9.9-7ubuntu5.16+esm19 |
| imagemagick | imagemagick | >= 0 < 8:6.9.7.4+dfsg-16ubuntu6.15+esm11 | 8:6.9.7.4+dfsg-16ubuntu6.15+esm11 |
| imagemagick | imagemagick | >= 0 < 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9 |
| imagemagick | imagemagick | >= 0 < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9 | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9 |
| imagemagick | imagemagick | >= 0 < 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 |
| imagemagick | imagemagick | >= 7.0.0-0 < 7.1.2-16 | 7.1.2-16 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu6.5MEDIUM
vendor_debian5.7MEDIUM
vendor_redhat5.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
ImageMagick up to 6.9.13-40/7.1.2-15 PNG Image Parser memory corruption (EUVD-2026-10391 / Nessus ID 302153)
vuldb·2026-04-22·CVSS 7.8
CVE-2026-30883 [HIGH] ImageMagick up to 6.9.13-40/7.1.2-15 PNG Image Parser memory corruption (EUVD-2026-10391 / Nessus ID 302153)
A vulnerability was found in ImageMagick up to 6.9.13-40/7.1.2-15 and classified as critical. This issue affects some unknown processing of the component PNG Image Parser. Such manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2026-30883. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
OSV
imagemagick vulnerabilities
osv·2026-03-30·CVSS 7.5
CVE-2026-23952 [HIGH] imagemagick vulnerabilities
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly process certain tags
prior to an image being loaded. An attacker could possibly use this issue
to cause ImageMagick to crash, resulting in a denial of service.
(CVE-2026-23952)
It was discovered that ImageMagick did not properly handle temporary file
creation failures. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. (CVE-2026-25795)
It was discovered that ImageMagick did not properly manage memory under
certain conditions. An attacker could possibly use this issue to cause
ImageMagick to consume resources, resulting in a denial of service.
(CVE-2026-25796)
It was discovered that ImageMagick incorrectly handled certain specially
crafted image files.
OSV
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
osv·2026-03-10
CVE-2026-30883 [MEDIUM] ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
An extremely large image profile could result in a heap overflow when encoding a PNG image.
GHSA
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
ghsa·2026-03-10
CVE-2026-30883 [MEDIUM] CWE-119 ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
An extremely large image profile could result in a heap overflow when encoding a PNG image.
OSV
CVE-2026-30883: ImageMagick is free and open-source software used for editing and manipulating digital images
osv·2026-03-10·CVSS 7.8
CVE-2026-30883 [HIGH] CVE-2026-30883: ImageMagick is free and open-source software used for editing and manipulating digital images
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
Ubuntu
ImageMagick vulnerabilities
vendor_ubuntu·2026-03-30·CVSS 6.5
CVE-2026-25799 [MEDIUM] ImageMagick vulnerabilities
Title: ImageMagick vulnerabilities
Summary: Several security issues were fixed in ImageMagick.
It was discovered that ImageMagick did not properly process certain tags
prior to an image being loaded. An attacker could possibly use this issue
to cause ImageMagick to crash, resulting in a denial of service.
(CVE-2026-23952)
It was discovered that ImageMagick did not properly handle temporary file
creation failures. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. (CVE-2026-25795)
It was discovered that ImageMagick did not properly manage memory under
certain conditions. An attacker could possibly use this issue to cause
ImageMagick to consume resources, resulting in a denial of service.
(CVE-2026-25796)
It was discovered that Ima
Red Hat
ImageMagick: ImageMagick: Denial of Service due to heap overflow when processing large image profiles
vendor_redhat·2026-03-09·CVSS 5.7
CVE-2026-30883 [MEDIUM] CWE-120 ImageMagick: ImageMagick: Denial of Service due to heap overflow when processing large image profiles
ImageMagick: ImageMagick: Denial of Service due to heap overflow when processing large image profiles
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local attacker could exploit this vulnerability by providing an extremely large image profile when encoding a PNG image. This could result in a heap overflow, leading to a Denial of Service (DoS), which makes the affected system or application unavailable to legitimate users.
Statement: This M
Debian
CVE-2026-30883: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...
vendor_debian·2026·CVSS 5.7
CVE-2026-30883 [MEDIUM] CVE-2026-30883: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 8:7.1.2.16+dfsg1-1)
sid: resolved (fixed in 8:7.1.2.16+dfsg1-1)
trixie: resolved (fixed in 8:7.1.1.43+dfsg1-1+deb13u7)
No detection rules found.
No public exploits indexed.
2026-03-10
Published