Volerion logoVolerion
Volerion logoVolerion

ImageMagick Heap-Based Buffer Overflow Vulnerability in NewXMLTree Method Leading to Crash

Vulnerability

A heap-based buffer overflow vulnerability has been identified in the NewXMLTree method of ImageMagick. This issue, present in versions prior to 7.1.2-17 and 6.9.13-42, can cause a crash by writing out of bounds of a single zero byte. The vulnerability has been addressed in the mentioned patched versions.

Impact

Exploitation of this vulnerability causes a crash due to a heap-buffer overflow, which can potentially be exploited to execute arbitrary code.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-17 or 6.9.13-42 to address this vulnerability.

Added: Mar 18, 2026, 9:21 PM
Updated: Mar 18, 2026, 9:21 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
4.7
remediation
7.7
relevance
4.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.