CVE-2026-33535: ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

March 26, 2026 (updated April 6, 2026)

An out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash.

References

github.com/ImageMagick/ImageMagick
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mw3m-pqr2-qv7c
github.com/advisories/GHSA-mw3m-pqr2-qv7c
nvd.nist.gov/vuln/detail/CVE-2026-33535

Code Behaviors & Features

Detect and mitigate CVE-2026-33535 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →