Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-986 Medium 5.5

ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage

JLSEC Published
Modified
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Packages
ImageMagick_jll < 7.1.2023+0

A crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operation an out of bounds write can occur.

=================================================================
==661320==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x503000002754 at pc 0x5ff45f82c92a bp 0x7fffb732b400 sp 0x7fffb732b3f0
WRITE of size 4 at 0x503000002754 thread T0

References