4.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-62343

CVE-2026-62343: ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-62343

CVE-2026-62343:

4.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
Magick.NET-Q16-AnyCPU	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-HDRI-AnyCPU	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-HDRI-OpenMP-arm64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-HDRI-x64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-HDRI-x86	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-OpenMP-arm64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-OpenMP-x64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-arm64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-x64	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-x86	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-AnyCPU	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-OpenMP-arm64	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-OpenMP-x64	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-arm64	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-x64	nuget	< 14.15.0	14.15.0
Magick.NET-Q8-x86	nuget	< 14.15.0	14.15.0
Magick.NET-Q16-HDRI-arm64	nuget	< 14.15.0	14.15.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a heap buffer overwrite caused by an integer overflow when calculating the memory size for a morphology kernel. The patch introduces a new function, AcquireKernelValues, which performs a sanity check (HeapOverflowSanityCheckGetSize) before allocating memory. The vulnerable functions, ParseKernelArray, AcquireKernelBuiltIn, and CloneKernelInfo, were all modified to use this new safe allocation function, indicating that they were previously performing unsafe memory allocations. An attacker could exploit this by providing a specially crafted kernel string or by using a built-in kernel that results in large width and height values, causing an integer overflow and leading to a small allocation with a subsequent buffer overflow when the kernel data is written.

Vulnerable functions

ParseKernelArray

MagickCore/morphology.c

The function `ParseKernelArray` was allocating memory for kernel values based on width and height from a user-supplied string without checking for integer overflow. This could lead to a heap buffer overwrite. The patch replaces the direct memory allocation with a call to `AcquireKernelValues` which includes an overflow check.

AcquireKernelBuiltIn

MagickCore/morphology.c

The function `AcquireKernelBuiltIn` was allocating memory for various built-in kernels. In multiple places, the memory allocation for `kernel->values` did not have an integer overflow check for the size calculation based on `kernel->width` and `kernel->height`. This could be exploited if a built-in kernel type with large dimensions is used. The patch replaces these allocations with a call to the safe `AcquireKernelValues` function.

CloneKernelInfo

MagickCore/morphology.c

The function `CloneKernelInfo` was allocating memory for the values of the cloned kernel. The size of the allocation was calculated from the width and height of the source kernel without an integer overflow check. This could lead to a heap buffer overwrite if a kernel with large dimensions is cloned. The patch fixes this by using the `AcquireKernelValues` function.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

4.7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-62343: ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

CVE-2026-62343:

4.7

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Detect and Respond To Threats Faster.

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

CVE-2026-62343: ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

Basic Information

Basic Information

Technical Details

4.7

4.7

4.7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-62343: ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

CVE-2026-62343:

4.7

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

CVE-2026-62343: ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

Basic Information

Basic Information

Technical Details

4.7

4.7

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI