ImageMagick versions prior to 7.1.2.35-1.oe2403sp1 contain a heap-based buffer overflow vulnerability in the -morph processing feature. This flaw allows an attacker to supply a crafted image that causes writes beyond the bounds of a heap buffer, potentially corrupting memory and crashing the application. The vulnerability has a medium severity score of 4.8 and is fixed in version 7.1.2.35-1.oe2403sp1.