GHSA-q8h3-jv9v-57qx: ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing

April 14, 2026 (updated April 16, 2026)

An incorrect morphology would allow an out of bounds read of a single pixel.

==1200284==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5100000002d0 at pc 0x59e28e60c27a bp 0x7fff047fd8e0 sp 0x7fff047fd8d0
READ of size 4 at 0x5100000002d0 thread T0

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q8h3-jv9v-57qx
github.com/advisories/GHSA-q8h3-jv9v-57qx

Code Behaviors & Features

Detect and mitigate GHSA-q8h3-jv9v-57qx with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →