ZeroDay Findings
Sign inSign up

Findings

CVE-2026-33905

ImageMagick is free and open-source software used for editing and manipulating digital images.

Published Apr 13, 2026 · updated Jun 17, 2026 · imagemagick imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the define that could lead to an out of bounds read. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 13, 2026 · NIST NVD

    Detected

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the define that could lead to an out of bounds read. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

  2. Jun 17, 2026 · NIST NVD

    Updated

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the define that could lead to an out of bounds read. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

Affected

  • cpe imagemagick/imagemagickversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33905

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33905

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the define that could lead to an ou

    nvd.nist.gov

References