CVE-2026-30929
Received Received - Intake
Buffer Overflow in ImageMagick MagnifyImage Causes Stack Corruption

Publication date: 2026-03-10

Last updated on: 2026-03-13

Assigner: GitHub, Inc.

Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MagnifyImage uses a fixed-size stack buffer. When using a specific image it is possible to overflow this buffer and corrupt the stack. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-10
Last Modified
2026-03-13
Generated
2026-06-16
AI Q&A
2026-03-10
EPSS Evaluated
2026-06-15
NVD
CVE-2026-30929
EUVD
EUVD-2026-10395
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
imagemagick imagemagick to 6.9.13-41 (exc)
imagemagick imagemagick From 7.0.0-0 (inc) to 7.1.2-16 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-30929 is a high-severity stack buffer overflow vulnerability in the MagnifyImage function of the ImageMagick software.

The issue occurs because MagnifyImage uses a fixed-size stack buffer, which can be overflowed when processing a specially crafted image, leading to stack corruption.

This vulnerability affects versions prior to 7.1.2-16 and 6.9.13-41 and has been fixed in these versions.

Impact Analysis

This vulnerability can lead to stack corruption due to a buffer overflow when processing a maliciously crafted image.

The CVSS v3.1 score indicates high impact on integrity and availability, meaning an attacker could potentially alter data or cause the software to crash or become unavailable.

The attack requires local access but no privileges or user interaction, making it easier for an attacker with local access to exploit.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, you should update ImageMagick to a patched version. Specifically, upgrade to version 7.1.2-16 or later, or 6.9.13-41 or later, as these versions contain fixes for the stack buffer overflow in the MagnifyImage function.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-30929. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart