CVE-2026-30929
Buffer Overflow in ImageMagick MagnifyImage Causes Stack Corruption
Publication date: 2026-03-10
Last updated on: 2026-03-13
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| imagemagick | imagemagick | to 6.9.13-41 (exc) |
| imagemagick | imagemagick | From 7.0.0-0 (inc) to 7.1.2-16 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-30929 is a high-severity stack buffer overflow vulnerability in the MagnifyImage function of the ImageMagick software.
The issue occurs because MagnifyImage uses a fixed-size stack buffer, which can be overflowed when processing a specially crafted image, leading to stack corruption.
This vulnerability affects versions prior to 7.1.2-16 and 6.9.13-41 and has been fixed in these versions.
How can this vulnerability impact me? :
This vulnerability can lead to stack corruption due to a buffer overflow when processing a maliciously crafted image.
The CVSS v3.1 score indicates high impact on integrity and availability, meaning an attacker could potentially alter data or cause the software to crash or become unavailable.
The attack requires local access but no privileges or user interaction, making it easier for an attacker with local access to exploit.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should update ImageMagick to a patched version. Specifically, upgrade to version 7.1.2-16 or later, or 6.9.13-41 or later, as these versions contain fixes for the stack buffer overflow in the MagnifyImage function.