Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-950 Critical 9.8

ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write

JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Packages
ImageMagick_jll < 7.1.2023+0

An Integer Overflow vulnerability exists in the sun decoder. On 32-bit systems/builds, a carefully crafted image can lead to an out of bounds heap write.

=================================================================
==1967675==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf190b50e at pc 0x5eae8777 bp 0xffb0fdd8 sp 0xffb0fdd0
WRITE of size 1 at 0xf190b50e thread T0

References