Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-985 Medium 4.4

ImageMagick has Heap Buffer Over-Read in BilateralBlurImage

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected Packages
ImageMagick_jll < 7.1.2023+0
Upstream
CVE-2026-30935 GHSA-cqw9-w2m7-r2m2 EUVD-2026-10399

BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur.

=================================================================
==676172==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x50a0000079c0 at pc 0x57b483c722f7 bp 0x7fffc0acd380 sp 0x7fffc0acd370
READ of size 4 at 0x50a0000079c0 thread T0

References