# ImageMagick 7.1.2-31

- Product: ImageMagick (https://whatsnew.fyi/product/imagemagick)
- Vendor: ImageMagick Studio
- Date: 2026-09-03
- Version: 7.1.2-31
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-31

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Require libultrahdr 1.4.0 for UHDR support
- **fixed** — Use registered UHDR module name in policy check
- **fixed** — Fixed policy check for coders
- **fixed** — Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory
- **fixed** — Escape the labels to prevent code injection
- **fixed** — Added missing check for eof when using the custom stream reader in ReadBlob
- **fixed** — Use a better algorithm to determine the numerator and denominator
- **fixed** — Added missing null check to avoid a null pointer dereference
- **added** — Initial framework for the c2pa coder
- **changed** — Limit c2pa support to decoding only
- **changed** — Trim labels to prevent code injection
- **added** — Create SBOM for portable builds

###### Merged
- build: require libultrahdr 1.4.0 for UHDR #8936
- fix: use registered UHDR module name in policy check #8935
- build(deps): bump azure/login from 3.0.1 to 3.0.2 #8934
- build(deps): bump the codeql-action group with 3 updates #8933
- build(deps): bump the codeql-action group with 3 updates #8925
- build(deps): bump ubuntu from 678c655 to 2260313 in /.devcontainer #8923
###### Commits
- beta release a1f2ef2
- Also create an SBOM for the portable builds. 482ae0e
- Corrected file names. c3d83c6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c 8f62023
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm 5904641
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c 768bdd0
- Added missing include and corrected the module name. 07143f6
- Added missing coders. 7e99fb4
- Fixed the policy check for coders (GHSA-vcjj-32hg-qpx5) 82f373f
- More fixes for GHSA-vcjj-32hg-qpx5. dcdbbf4
- Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory (GHSA-6xf5-c3jx-rp39) 5d29c09
- Moved EscapeParenthesis to the ghostscript-private.h header file. e2bd884
- Escape the labels to prevent code injection (GHSA-5rg6-j44q-q892) 78378cd
- Added missing define checks bd96dda
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92 c69f54e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm 86672a1
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62 c311471
- Added missing include. 5ccfb2f
- Added missing check for eof when using the custom stream reader in ReadBlob 78aff3a
- Use a better algorithm to determine the numerator and denominator (GHSA-v45j-x8p4-3mh4) f491576
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v d779ac5
- initial framework for the c2pa coder b34352d
- add header 9f2cb10
- add c2pa coder framework a4d1d62
- eliminate compiler warnings a37640f
- Removed unused argument 0e94ad4
- Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4) c4b3c90
- https://github.com/ImageMagick/ImageMagick/issues/8927 c717095
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 282f455
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 4fe3110
- framework for c2pa coder 7d25548
- add new exception for required manifest b14e552
- add C2PA define 837ec6f
- include static header 03a79c3
- cosmetic beeb133
- c2pa decode poc 114618e
- https://github.com/ImageMagick/ImageMagick/issues/8930 a96821a
- https://github.com/ImageMagick/ImageMagick/issues/8930 c42d72d
- create symbolic link only if input file exists d4f900a
- correct c2pa delegate de7f30c
- More fixes for GHSA-89wq-f8f6-2j2v b5da5ea
- Updated the dependencies. 5f49dfb
- More fixes for GHSA-5rg6-j44q-q892. 2ba2edf
- for now, limit c2pa support to decoding only 977a278
- eliminate compile exception f557204
- eliminate compiler exception a92f423
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq 8f3a15e
- latest autoconf update 8cab7be
- check >= limit 404450e
- extra check not needed 32bbfb1
- revert e18959a
- Removed unused code. ad464d1
- Trim labels to prevent code injection (GHSA-p6j5-2qwh-6486) 8309dc9
- release fb965f1