CVE-2026-32636 | ImageMagick up to 6.9.13-41/7.1.2-16 Image Parser NewXMLTree out-of-bounds write (GHSA-gc62-2v5p-qpmp)

A vulnerability has been found in ImageMagick up to 6.9.13-41/7.1.2-16 and classified as critical. Affected by this issue is the function NewXMLTree of the component Image Parser. Performing a manipulation results in out-of-bounds write.

This vulnerability is reported as CVE-2026-32636. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.