Launch Week Day 1: Announcing Security Design Review
MEDIUM 4.0 NuGet

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

GHSA-r99p-5442-q2x2 · CVE-2026-27799

Published · Modified

Description

A heap Buffer Over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads.

Ready to move

Start Securing

Free, no credit card | First findings in minutes