CVE-2026-33899Disclosure(imagemagick / imagemagick)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when `Magick` parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

imagemagick CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/ImageMagick/ImageMagick/commit/ae679e2fd19ec656bfab9f822ae4cf06bf91604d

Vendor / third-party advisories

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr67-pvmx-2pp2

Other references

Weakness type (CWE)

CWE-122CWE-191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

imagemagick

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-04-14); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

imagemagick

Products

imagemagick

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

cvereports@_cvereports163d
Disclosure
CVE-2026-33899: CVE-2026-33899: Heap-Based Buffer Overflow via Integer Underflow in ImageMagick XML Parser ImageMagick versions prior to 7.1.2-19 and 6.9.13-44 contain a heap-based buffer overflow vulnerability in the XML parsing engine. The flaw aris... https://cvereports.com/reports/CVE-2026-33899
Post summary
The post discloses a heap-based buffer overflow vulnerability in ImageMagick’s XML parsing engine affecting older versions, without providing any PoC, exploit code, or mitigation details.
0000033
36 followersView on X
CVE@CVEnew177d
Disclosure
CVE-2026-33899 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when `Magick` parses an XML … https://www.cve.org/CVERecord?id=CVE-2026-33899
Post summary
The post announces a vulnerability in ImageMagick affecting versions below 7.1.2-189 and 6.9.13-44 during XML parsing, but offers no PoC, exploit information, or patch details.
0000097
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	imagemagick	imagemagick	-	-	-

Explore more

Back to dashboard imagemagick CVEs imagemagick vulnerabilities