{
  "cveId": "CVE-2026-30935",
  "url": "https://patchblox.com/security/cve/CVE-2026-30935",
  "summary": "CVE-2026-30935 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-30935, released March 10, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ImageMagick: This update for ImageMagick fixes the following issues:\n\n- CVE-2026-28493: integer overflow in the SIXEL decoder lead...",
  "description": "This update for ImageMagick fixes the following issues:\n\n- CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).\n- CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow\n  (bsc#1259447).\n- CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow\n  (bsc#1259448).\n- CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).\n- CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).\n- CVE-2026-28689: \u0060domain=\u0027path\u0027\u0060 authorization is checked before final file open/use and allows for read/write bypass\n  via symlink swaps (bsc#1259452).\n- CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).\n- CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).\n- CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).\n- CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).\n- CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).\n- CVE-2026-30929: improper use of fixed-size stack buffer in \u0060MagnifyImage\u0060can lead to a stack buffer overflow\n  (bsc#1259468).\n- CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497).\n- CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464).\n- CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).\n- CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely\n  large images (bsc#1259528).\n- CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612).\n- CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872).\n- CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).\n- CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879).",
  "published": "2026-03-10T07:44:57Z",
  "severity": "medium",
  "cvss": 4.4,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
  "epss": 0.00125,
  "epssPercentile": 0.02233,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ImageMagick",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "7.1.1.21-150600.3.50.1",
      "fix": "SUSE-SU-2026:1203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1203-1",
      "released": "2026-04-07T12:24:55Z"
    },
    {
      "platform": "linux",
      "product": "ImageMagick",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "7.1.2.0-160000.7.1",
      "fix": "OPENSUSE-SU-2026:20405-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20405-1",
      "released": "2026-03-20T09:31:54Z"
    },
    {
      "platform": "linux",
      "product": "ImageMagick",
      "release": "sles 15.6",
      "fixedVersion": "7.1.1.21-150600.3.50.1",
      "fix": "SUSE-SU-2026:1203-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1203-1",
      "released": "2026-04-07T12:24:55Z"
    },
    {
      "platform": "linux",
      "product": "ImageMagick",
      "release": "sles 15.7",
      "fixedVersion": "7.1.1.43-150700.3.42.1",
      "fix": "SUSE-SU-2026:1202-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1202-1",
      "released": "2026-04-07T12:24:42Z"
    },
    {
      "platform": "linux",
      "product": "ImageMagick",
      "release": "sles 16.0",
      "fixedVersion": "7.1.2.0-160000.7.1",
      "fix": "SUSE-SU-2026:20917-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20917-1",
      "released": "2026-03-20T09:31:53Z"
    },
    {
      "platform": "linux",
      "product": "imagemagick",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "8:7.1.1.43\u002Bdfsg1-1\u002Bdeb13u7",
      "fix": "DEBIAN-CVE-2026-30935",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-30935",
      "released": "2026-03-10T07:44:57Z"
    },
    {
      "platform": "linux",
      "product": "imagemagick",
      "release": "Debian 14",
      "fixedVersion": "8:7.1.2.16\u002Bdfsg1-1",
      "fix": "DEBIAN-CVE-2026-30935",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-30935",
      "released": "2026-03-10T07:44:57Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}