CVE-2026-64685 — ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file i…
Published: 2026-07-29 · CVSS: 5.3 · CVSS 3.1
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location so a crafted image could result in an heap buffer over-read. This issue has been fixed in version 7.1.2-27.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7