CVE-2026-33535: ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

March 26, 2026 (updated April 6, 2026)

An out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash.

References

github.com/ImageMagick/ImageMagick
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mw3m-pqr2-qv7c
github.com/advisories/GHSA-mw3m-pqr2-qv7c
nvd.nist.gov/vuln/detail/CVE-2026-33535

Code Behaviors & Features

Detect and mitigate CVE-2026-33535 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →