CVE-2026-30936

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operation an out of bounds write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

• CWE-122

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5ggv-92r5-cp4pVendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30930Glances is an open-source system cross-platform monitoring t…9.8
• CVE-2026-30931ImageMagick is free and open-source software used for editin…7.8
• CVE-2026-30932Froxlor is open source server administration software. Prior…8.8
• CVE-2026-30933FileBrowser Quantum is a free, self-hosted, web-based file m…7.5
• CVE-2026-30934FileBrowser Quantum is a free, self-hosted, web-based file m…5.4
• CVE-2026-30935ImageMagick is free and open-source software used for editin…4.4
• CVE-2026-30937ImageMagick is free and open-source software used for editin…6.1
• CVE-2026-30938Parse Server is an open source backend that can be deployed …5.3
• CVE-2026-30939Parse Server is an open source backend that can be deployed …7.5
• CVE-2026-3094Delta Electronics CNCSoft-G2 lacks proper validation of the …7.8
• CVE-2026-30940baserCMS is a website development framework. Prior to versio…7.2
• CVE-2026-30941Parse Server is an open source backend that can be deployed …7.5