EUVD-2026-109403

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing...

CVE-2026-116142

ImageMagick versions prior to 7.1.2-33 are vulnerable to a heap buffer over-read flaw during the output of a minimum-bounding-box . An attacker can provide a crafted image that triggers the over-read, potentially resulting in application crashes or the exposure of adjacent heap memory . No specif...