ImageMagick Heap Buffer Over-Read Vulnerability in MAP Image Decoder

Vulnerability

A heap buffer over-read vulnerability has been identified in ImageMagick's MAP image decoder, affecting versions prior to 7.1.2-15 and 6.9.13-40. This vulnerability arises when the decoder processes crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

Impact

Exploitation of this vulnerability causes a heap buffer over-read, which can result in crashes or unauthorized memory disclosure.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.

Added: Feb 24, 2026, 2:39 AM
Updated: Feb 24, 2026, 2:39 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
3.1
exploitability
4.3
remediation
7.7
relevance
3.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.