CVE-2026-62363

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.

Score

CVSS 3.1 5.0 Medium

Status

Analyzed - security-advisories@github.com

Published

2026-07-30

Last modified

2026-07-30

Weaknesses

CWE-787

Affected products

• Imagemagick (Imagemagick)

References

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4