CVE-2026-109964
ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
6.3 MediumFix available
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
0.34%Unchanged since Oct 14, 2026
What each source reports
CVE List Score used
ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
CVE-2026-109964- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-124
- Updated
- 2026-11-02
EUVDEUVD-2026-98684
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
EUVD-2026-98684- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-279f-3w5r-54f5
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in...
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
GHSA-279f-3w5r-54f5- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-124
- Updated
- 2026-11-02
NVD
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
CVE-2026-109964- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-124
- Updated
- 2026-11-03
OSV
ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
CVE-2026-109964- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - Weakness
- CWE-124
- Updated
- 2026-11-05
OSVDEBIAN-CVE-2026-109964
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
DEBIAN-CVE-2026-109964- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-04
Show 7 moreShow less
OSVUBUNTU-CVE-2026-109964
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
- Record
UBUNTU-CVE-2026-109964- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVCLSA-2026-1792505524 No score
Fix of 6 CVEs
- SECURITY UPDATE: heap buffer underwrite in the PICT decoder
- debian/patches/CVE-2026-109964.patch: stop decoding when the row pointer wraps below the pixel buffer in DecodeImage() in coders/pict.c
- CVE-2026-109964
- SECURITY UPDATE: MVG command injection via the SVG decoder
- debian/patches/CVE-2026-56379.patch: add SVGEscapeString() and escape attribute and style values before writing them to the MVG stream in SVGProcessStyleElement() and SVGStartElement() in coders/svg.c
- CVE-2026-56379
- Record
CLSA-2026-1792505524- Updated
- 2026-11-02
OSVCLSA-2026-1792716976 No score
ImageMagick: Fix of 22 CVEs
- CVE-2026-109278: fix memory leak in the wavelet denoise path
- CVE-2026-109282: do not return a stdio handle for compressed blobs in INFO/JSON
- CVE-2026-109269: check JPEG component count before reading sampling factors
- CVE-2026-109964: check PICT row offsets for overflow
- CVE-2026-109266: escape the title in the CIP encoder
- Record
CLSA-2026-1792716976- Updated
- 2026-11-02
OSVCLSA-2026-1792717203 No score
ImageMagick: Fix of 22 CVEs
- CVE-2026-109278: fix memory leak in the wavelet denoise path
- CVE-2026-109282: do not return a stdio handle for compressed blobs in INFO/JSON
- CVE-2026-109269: check JPEG component count before reading sampling factors
- CVE-2026-109964: check PICT row offsets for overflow
- CVE-2026-109266: escape the title in the CIP encoder
- Record
CLSA-2026-1792717203- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12170-1 No score
ImageMagick-7.1.2.34-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.34-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12170-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12189-1 No score
GraphicsMagick-1.3.49-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12189-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:5095-1 No score
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue:
- CVE-2026-109964: heap buffer overwrite in PICT decoder on 32-bit systems (bsc#1285423).
- Record
SUSE-SU-2026:5095-1- Updated
- 2026-11-04
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-6-commonTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-6-docTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-6.q16TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-6.q16hdriTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-commonTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
imagemagick-docTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libimage-magick-perlTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libimage-magick-q16-perlTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libimage-magick-q16hdri-perlTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libmagick++-6-headersTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagick++-6.q16-8TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagick++-6.q16-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagick++-6.q16hdri-8TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagick++-6.q16hdri-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagick++-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6-arch-configTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6-headersTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16-6TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16-6-extraTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16hdri-6TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16hdri-6-extraTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-6.q16hdri-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickcore-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-6-headersTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-6.q16-6TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-6.q16-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-6.q16hdri-6TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-6.q16hdri-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
libmagickwand-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
perlmagickTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els48 |
ImageMagickTuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-c++TuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-c++-develTuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-develTuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-docTuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-perlTuxCare:OracleLinux:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagickTuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-c++TuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-c++-develTuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-develTuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-docTuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
ImageMagick-perlTuxCare:RHEL:7 From an advisory covering 5 CVEs |
before 6.9.10.68-7.0.11.el7_9.tuxcare.els10 | 6.9.10.68-7.0.11.el7_9.tuxcare.els10 |
imagemagickDebian:12 |
before 8:6.9.11.60+dfsg-1.6+deb12u15, plus listed versions 8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u108:6.9.11.60+dfsg-1.6+deb12u118:6.9.11.60+dfsg-1.6+deb12u12 Show 10 moreShow less8:6.9.11.60+dfsg-1.6+deb12u138:6.9.11.60+dfsg-1.6+deb12u148:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u78:6.9.11.60+dfsg-1.6+deb12u88:6.9.11.60+dfsg-1.6+deb12u9 |
8:6.9.11.60+dfsg-1.6+deb12u15 |
imagemagickDebian:13 |
before 8:7.1.1.43+dfsg1-1+deb13u14, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u108:7.1.1.43+dfsg1-1+deb13u118:7.1.1.43+dfsg1-1+deb13u12 Show 9 moreShow less8:7.1.1.43+dfsg1-1+deb13u138:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u9 |
8:7.1.1.43+dfsg1-1+deb13u14 |
imagemagickDebian:14 |
before 8:7.1.2.33+dfsg1-1, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1 Show 19 moreShow less8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.26+dfsg1-18:7.1.2.27+dfsg1-18:7.1.2.29+dfsg2-18:7.1.2.3+dfsg1-18:7.1.2.31+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1 |
8:7.1.2.33+dfsg1-1 |
GraphicsMagickSUSE:Linux Enterprise Module for Package Hub 15 SP7 |
before 1.3.42-150600.3.51.1 | 1.3.42-150600.3.51.1 |
imagemagickUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3 Show 39 moreShow less8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm238:6.7.7.10-6ubuntu3.13+esm248:6.7.7.10-6ubuntu3.13+esm258:6.7.7.10-6ubuntu3.13+esm268:6.7.7.10-6ubuntu3.13+esm27 |
None known |
imagemagickUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1 Show 45 moreShow less8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm228:6.8.9.9-7ubuntu5.16+esm238:6.8.9.9-7ubuntu5.16+esm248:6.8.9.9-7ubuntu5.16+esm258:6.8.9.9-7ubuntu5.16+esm26 |
None known |
imagemagickUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 29 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18 |
None known |
imagemagickUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 31 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16 |
None known |
imagemagickUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1 Show 24 moreShow less8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm128:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm138:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm158:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 |
None known |
imagemagickUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 Show 14 moreShow less8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm118:6.9.12.98+dfsg1-5.2ubuntu0.1~esm128:6.9.12.98+dfsg1-5.2ubuntu0.1~esm138:6.9.12.98+dfsg1-5.2ubuntu0.1~esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15 |
None known |
imagemagickUbuntu:26.10 |
All versions, plus listed versions 8:7.1.2.18+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.27+dfsg1-18:7.1.2.31+dfsg1-1 |
None known |
imagemagickUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1 Show 6 moreShow less8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4 |
None known |
ImageMagickopenSUSE:Tumbleweed From an advisory covering 21 CVEs |
before 7.1.2.34-1.1 | 7.1.2.34-1.1 |
GraphicsMagickopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 1.3.49-1.1 | 1.3.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, aliases, references | OSV | |
| facts, references | NVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-109964 is a medium vulnerability (CVSS 6.3) in Imagemagick, published October 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in imagemagick 8:6.9.11.60+dfsg-1.6+deb12u15.
References
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w
vulncheck.com/advisories/imagemagick-before-7.1.2-33-and-6.9.13-58-heap-buffer-underwrite-in-pict-decoder
Show 60 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-109964
errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792505524.html
security-tracker.debian.org/tracker/CVE-2026-109964
suse.com/support/update/announcement/2026/suse-su-20265095-1
bugzilla.suse.com/1285423
ubuntu.com/security/CVE-2026-109964
cve.org/CVERecord?id=CVE-2026-109964