ShellCodeX
Tools • Events • News • Insights
ShellCodeX vulnerability brief
MEDIUM Received

CVE-2026-62343

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

Published 30 Jul 2026, 00:16 UTC Last modified 30 Jul 2026, 00:16 UTC
01

Attack profile

The conditions required to exploit this vulnerability and its potential impact.

Attack vector Local
Attack complexity High
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Exploitability1.0
Impact3.6
02

Affected products

Product applicability statements supplied with the NVD record.

NVD has not published structured affected-product data for this record.
03

Weakness classification

CWE categories help security teams group the underlying software weakness.

04

Source references

External advisories, patches and technical reports attached to this CVE record.