CVE-2026-119124

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-34

Description A heap-based buffer overflow exists in the -morph processing. This occurs when crafted images cause writes beyond the bounds of a heap buffer, which is a region of memory used for dynamic allocation. An attacker can provide a specially crafted image that, when processed using the -morph option, corrupts heap memory and leads to an application crash.

Recommendations Update to version 7.1.2-34 or later. As a temporary mitigation, avoid using the -morph option when processing images from untrusted sources.