CVE-2026-33535

CWE-787 — Out-of-bounds Write8 documents7 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 97.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Imagemagick Imagemagick
Timeline
PublishedMar 26

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.5 | Impact: 1.4

Affected Packages21 packages

▶CVEListV5imagemagick/imagemagick< 7.1.2-18+1
▶NVDimagemagick/imagemagick7.0.0-0 — 7.1.2-18+1
▶NuGetMagick.NET-Q8-OpenMP-x64< 14.11.1
▶NuGetMagick.NET-Q16-OpenMP-x64< 14.11.1
▶NuGetMagick.NET-Q16-OpenMP-x86< 14.11.1

🔴Vulnerability Details

4
CVEList
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction↗2026-03-26
▶
OSV
CVE-2026-33535: ImageMagick is free and open-source software used for editing and manipulating digital images↗2026-03-26
▶
GHSA
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction↗2026-03-26
▶
OSV
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction↗2026-03-26
▶

📋Vendor Advisories

2
Red Hat
ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in X11 display interaction path↗2026-03-26
▶
Debian
CVE-2026-33535: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...↗2026
▶

🕵️Threat Intelligence

1
Wiz
CVE-2026-33535 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2026-33535 (MEDIUM CVSS 5.5) | ImageMagick is free and open-source | cvebase.io