GHSA-8vfj-q2cp-5m5j: ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value

April 14, 2026 (updated April 16, 2026)

An unrecognized magnify:method will result in an out of bounds read in the magnify operation.

==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61a000000b30
READ of size 4 at 0x61a000000b30 thread T0

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8vfj-q2cp-5m5j
github.com/advisories/GHSA-8vfj-q2cp-5m5j

Code Behaviors & Features

Detect and mitigate GHSA-8vfj-q2cp-5m5j with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →