CVE-2026-34238Disclosure(imagemagick / imagemagick)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

imagemagick CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/ImageMagick/ImageMagick/commit/bcd8519c70ecd9ebbc180920f2cf97b267d1f440

Vendor / third-party advisories

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-26qp-ffjh-2x4v

Other references

Weakness type (CWE)

CWE-190CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

imagemagick

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-04-14); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

imagemagick

Products

imagemagick

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-14	2	Disclosure2
2026-04-28	1	Disclosure1

Full discourse3 posts

cvereports@_cvereports163d
Disclosure
CVE-2026-34238: CVE-2026-34238: Heap Buffer Overflow in ImageMagick Despeckle Operation ImageMagick versions prior to 7.1.2-19 and 6.9.13-44 contain an integer overflow vulnerability in the DespeckleImage function. When processing maliciously crafted ... https://cvereports.com/reports/CVE-2026-34238
Post summary
The post discloses an integer‑overflow heap buffer overflow vulnerability in ImageMagick’s DespeckleImage function, providing technical details but no PoC, exploit, patch, or evidence of active exploitation.
0000028
36 followersView on X
CVE@CVEnew177d
Disclosure
CVE-2026-34238 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in t… https://www.cve.org/CVERecord?id=CVE-2026-34238
Post summary
CVE-2026-34238 discloses an integer overflow flaw in pre‑7.1.2‑19 and pre‑6.9.13‑44 ImageMagick releases, with a reference to the official CVE record.
0000099
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds178d
Disclosure
CVE-2026-34238 Heap Buffer Overflow in ImageMagick Despeckle Operation Below 7.1.2-19 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34238
Post summary
ImageMagick versions older than 7.1.2-19 are vulnerable to a heap buffer overflow triggered by the Despeckle operation.
0000035
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	imagemagick	imagemagick	-	-	-

Explore more

Back to dashboard imagemagick CVEs imagemagick vulnerabilities