CVE-2026-23876
Heap buffer overflow with attacker-controlled data in XBM parser
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Heap buffer overflow with attacker-controlled data in XBM parser
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
CVE-2026-23876- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122, CWE-190, CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2026-3589
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
EUVD-2026-3589- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
CVE-2026-23876- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122, CWE-190, CWE-787
- Updated
- 2026-11-02
OSV
Heap buffer overflow with attacker-controlled data in XBM parser
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
CVE-2026-23876- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122, CWE-190
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-23876
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
DEBIAN-CVE-2026-23876- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-936
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
JLSEC-2026-936- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 22 moreShow less
OSVOESA-2026-1241
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1241- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1242
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
A vulnerability exists in ImageMagick's BilateralBlur functionality where an invalid pointer is released when memory allocation fails, potentially leading to application crashes or security risks.(CVE-2026-22770)
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1242- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1243
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
A vulnerability exists in ImageMagick's BilateralBlur functionality where an invalid pointer is released when memory allocation fails, potentially leading to application crashes or security risks.(CVE-2026-22770)
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1243- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1244
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
A vulnerability exists in ImageMagick's BilateralBlur functionality where an invalid pointer is released when memory allocation fails, potentially leading to application crashes or security risks.(CVE-2026-22770)
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1244- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1245
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
A vulnerability exists in ImageMagick's BilateralBlur functionality where an invalid pointer is released when memory allocation fails, potentially leading to application crashes or security risks.(CVE-2026-22770)
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1245- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1246
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
A vulnerability exists in ImageMagick's BilateralBlur functionality where an invalid pointer is released when memory allocation fails, potentially leading to application crashes or security risks.(CVE-2026-22770)
ImageMagick contains an infinite recursion vulnerability in MSL script processing that can lead to stack overflow. The vulnerability exists in the ProcessMSLScript function, where attackers can craft malicious MSL scripts to trigger infinite recursion, ultimately causing stack overflow.(CVE-2026-23874)
ImageMagick is a widely used free and open-source software for image editing and manipulation. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability exists in the XBM image decoder (ReadXBMImage function). An attacker can exploit this by crafting a malicious XBM image file, causing controlled data to be written past the bounds of an allocated heap buffer during processing. Any operation that reads or identifies an image, such as common image upload and processing pipelines, can trigger this overflow, potentially leading to arbitrary code execution or application crash.(CVE-2026-23876)
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in version 14.10.2.(CVE-2026-23952)
- Record
OESA-2026-1246- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:3058
Red Hat Security Advisory: ImageMagick security update
- Record
RHSA-2026:3058- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-23876
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing a maliciously crafted image file. Any operation that reads or identifies an image can trigger the overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and 6.9.13-38 fix the issue.
- Record
UBUNTU-CVE-2026-23876- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1770802828 No score
ImageMagick: Fix of CVE-2026-23876
- CVE-2026-23876: fix heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage)
- Record
CLSA-2026-1770802828- Updated
- 2026-11-02
OSVCLSA-2026-1770820858 No score
ImageMagick: Fix of CVE-2026-23876
- CVE-2026-23876: fix heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage)
- Record
CLSA-2026-1770820858- Updated
- 2026-11-02
OSVCLSA-2026-1770903151 No score
Fix CVE(s): CVE-2026-23876
- SECURITY UPDATE: out of bounds write vulnerability in XBM decoder
- debian/patches/CVE-2026-23876.patch: add overflow checks to prevent out of bounds write in coders/xbm.c
- CVE-2026-23876
- Record
CLSA-2026-1770903151- Updated
- 2026-11-02
OSVCLSA-2026-1770909956 No score
Fix CVE(s): CVE-2026-23876
- SECURITY UPDATE: out of bounds write vulnerability in XBM decoder
- debian/patches/CVE-2026-23876.patch: add overflow checks to prevent out of bounds write in coders/xbm.c
- CVE-2026-23876
- Record
CLSA-2026-1770909956- Updated
- 2026-11-02
OSVCLSA-2026-1770910304 No score
Fix CVE(s): CVE-2026-23876
- SECURITY UPDATE: out of bounds write vulnerability in XBM decoder
- debian/patches/CVE-2026-23876.patch: add overflow checks to prevent out of bounds write in coders/xbm.c
- CVE-2026-23876
- Record
CLSA-2026-1770910304- Updated
- 2026-11-02
OSVCLSA-2026-1776180138 No score
Fix of 12 CVEs
- SECURITY UPDATE: fix vulnerability in image handling
- debian/patches/CVE-2025-53101.patch: fix vulnerability in image handling
- CVE-2025-53101
- SECURITY UPDATE: fix vulnerability in image handling
- debian/patches/CVE-2025-53014.patch: fix vulnerability in image handling
- CVE-2025-53014
- SECURITY UPDATE: fix heap-based buffer overflow in blob handling
- debian/patches/CVE-2025-57807.patch: fix heap-based buffer overflow in blob handling
- CVE-2025-57807
- SECURITY UPDATE: fix heap-based buffer overflow in XBM coder
- debian/patches/CVE-2026-23876.patch: fix heap-based buffer overflow in XBM coder
- CVE-2026-23876
- SECURITY UPDATE: fix buffer overflow in SUN coder
- debian/patches/CVE-2026-25897.patch: fix buffer overflow in SUN coder
- CVE-2026-25897
- SECURITY UPDATE: fix buffer overflow in PCD coder
- debian/patches/CVE-2026-26284.patch: fix buffer overflow in PCD coder
- CVE-2026-26284
- SECURITY UPDATE: fix vulnerability in MSL coder
- debian/patches/CVE-2026-25968.patch: fix vulnerability in MSL coder
- CVE-2026-25968
- SECURITY UPDATE: fix buffer overflow in YUV coder
- debian/patches/CVE-2026-25986.patch: fix buffer overflow in YUV coder
- CVE-2026-25986
- SECURITY UPDATE: fix buffer overflow in MAP coder
- debian/patches/CVE-2026-25987.patch: fix buffer overflow in MAP coder
- CVE-2026-25987
- SECURITY UPDATE: fix buffer overflow in UIL and XPM coders
- debian/patches/CVE-2026-25898.patch: fix buffer overflow in UIL and XPM coders
- CVE-2026-25898
- SECURITY UPDATE: fix heap-use-after-free in MSL coder
- debian/patches/CVE-2026-25983.patch: fix heap-use-after-free in MSL coder
- CVE-2026-25983
- SECURITY UPDATE: fix stack overflow via infinite recursion in MSL, SVG, and draw handling
- debian/patches/CVE-2026-25971.patch: fix stack overflow via infinite recursion in MSL, SVG, and draw handling
- CVE-2026-25971
- Record
CLSA-2026-1776180138- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10119-1 No score
ImageMagick-7.1.2.13-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.13-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10119-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20337-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969).
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: ImageMagick: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
- CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743).
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791).
- CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748).
- CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759).
- CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793).
- CVE-2026-25794: Heap-buffer-overflow via signed integer overflow in
WriteUHDRImagewhen writing UHDR images with large dimensions (bsc#1258749). - CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure (bsc#1258792).
- CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (bsc#1258757).
- CVE-2026-25797: Code injection in various encoders (bsc#1258770).
- CVE-2026-25798: NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (bsc#1258787).
- CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash (bsc#1258786).
- CVE-2026-25897: Out-of-bounds heap write via integer overflow in sun decoder (bsc#1258799).
- CVE-2026-25898: Information disclosure or denial of service via crafted image with invalid pixel index (bsc#1258807).
- CVE-2026-25965: Policy bypass through path traversal allows reading restricted content despite secured policy (bsc#1258785).
- CVE-2026-25966: Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (bsc#1258780).
- CVE-2026-25967: Stack buffer overflow in FTXT reader via oversized integer field (bsc#1258779).
- CVE-2026-25968: MSL attribute stack buffer overflow leads to out of bounds write (bsc#1258776).
- CVE-2026-25969: Memory Leak in coders/ashlar.c (bsc#1258775).
- CVE-2026-25970: Memory corruption and denial of service via signed integer overflow in SIXEL decoder (bsc#1258802).
- CVE-2026-25971: MSL: Stack overflow in ProcessMSLScript (bsc#1258774).
- CVE-2026-25982: Heap Out-of-Bounds Read in DCM Decoder (bsc#1258772).
- CVE-2026-25983: Denial of service via crafted MSL script (bsc#1258805).
- CVE-2026-25985: Memory allocation with excessive without limits in the internal SVG decoder (bsc#1258812).
- CVE-2026-25986: Denial of Service via malicious YUV image processing (bsc#1258818).
- CVE-2026-25987: Memory disclosure and denial of service via crafted MAP files (bsc#1258821).
- CVE-2026-25988: Denial of Service due to memory leak in image processing (bsc#1258810).
- CVE-2026-25989: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (bsc#1258771).
- CVE-2026-26066: Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (bsc#1258769).
- CVE-2026-26283: Possible infinite loop in JPEG encoder when using
jpeg: extent(bsc#1258767). - CVE-2026-26284: Heap overflow in pcd decoder leads to out of bounds read (bsc#1258765).
- CVE-2026-26983: Invalid MSL <map> can result in a use after free (bsc#1258763).
- CVE-2026-27798: Heap Buffer Over-read in WaveletDenoise when processing small images (bsc#1259018).
- CVE-2026-27799: ImageMagick has a heap Buffer Over-read in its DJVU image format handler (bsc#1259017).
- Record
openSUSE-SU-2026:20337-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-23876 No score
CVE-2026-23876 in rootio-imagemagick - Patched by Root
Root has patched CVE-2026-23876 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2026-23876- Updated
- 2026-11-02
OSVSUSE-SU-2026:0384-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
- Record
SUSE-SU-2026:0384-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0437-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969).
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
- Record
SUSE-SU-2026:0437-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0438-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969).
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
- Record
SUSE-SU-2026:0438-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0503-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
- Record
SUSE-SU-2026:0503-1- Updated
- 2026-11-02
OSVUSN-8021-1 No score
imagemagick vulnerability
Benny Isaacs discovered that ImageMagick did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
- Record
USN-8021-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ImageMagickTuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-c++TuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-c++-develTuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-develTuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-docTuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-perlTuxCare:OracleLinux:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagickTuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-c++TuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-c++-develTuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-develTuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
Show 166 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagick-docTuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
ImageMagick-perlTuxCare:CentOS:7 |
before 6.9.10.68-7.0.3.el7_9.tuxcare.els3 | 6.9.10.68-7.0.3.el7_9.tuxcare.els3 |
imagemagickTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
imagemagick-6.q16TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
imagemagick-commonTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
imagemagick-docTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libimage-magick-perlTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libimage-magick-q16-perlTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagick++-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagick++-6.q16-5v5TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagick++-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagick++-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-6-arch-configTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-6.q16-2TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-6.q16-2-extraTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickcore-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickwand-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickwand-6.q16-2TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickwand-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
libmagickwand-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
perlmagickTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 |
imagemagickTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-6-commonTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-6-docTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-6.q16TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-6.q16hdriTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-commonTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagick-docTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libimage-magick-perlTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libimage-magick-q16-perlTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libimage-magick-q16hdri-perlTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-6-headersTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-6.q16-8TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-6.q16-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-6.q16hdri-8TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-6.q16hdri-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagick++-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6-arch-configTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6-headersTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16-6TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16-6-extraTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16hdri-6TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16hdri-6-extraTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-6.q16hdri-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickcore-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-6-headersTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-6.q16-6TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-6.q16-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-6.q16hdri-6TuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-6.q16hdri-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
libmagickwand-devTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
perlmagickTuxCare:Ubuntu:20.04 |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 | 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els10 |
imagemagickTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-6-commonTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-6-docTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-6.q16TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-6.q16hdriTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-commonTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagick-docTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libimage-magick-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libimage-magick-q16-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libimage-magick-q16hdri-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-6.q16-7TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-6.q16hdri-7TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagick++-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6-arch-configTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16-3-extraTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16hdri-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16hdri-3-extraTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickcore-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-6.q16-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-6.q16hdri-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
libmagickwand-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
perlmagickTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els17 |
imagemagickTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-6-commonTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-6-docTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-6.q16TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-6.q16hdriTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-commonTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagick-docTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libimage-magick-perlTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libimage-magick-q16-perlTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libimage-magick-q16hdri-perlTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-6-headersTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-6.q16-8TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-6.q16-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-6.q16hdri-8TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-6.q16hdri-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagick++-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6-arch-configTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6-headersTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16-6TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16-6-extraTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16hdri-6TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16hdri-6-extraTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-6.q16hdri-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickcore-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-6-headersTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-6.q16-6TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-6.q16-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-6.q16hdri-6TuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-6.q16hdri-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
libmagickwand-devTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
perlmagickTuxCare:Debian:10 From an advisory covering 12 CVEs |
before 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 | 8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els1 |
imagemagickDebian:12 |
before 8:6.9.11.60+dfsg-1.6+deb12u6, plus listed versions 8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u5 |
8:6.9.11.60+dfsg-1.6+deb12u6 |
imagemagickDebian:13 |
before 8:7.1.1.43+dfsg1-1+deb13u5, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u4 |
8:7.1.1.43+dfsg1-1+deb13u5 |
imagemagickDebian:14 |
before 8:7.1.2.13+dfsg1-1, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1 Show 4 moreShow less8:7.1.2.12+dfsg1-18:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1 |
8:7.1.2.13+dfsg1-1 |
imagemagickDebian:11 From an advisory covering 3 CVEs |
before 8:6.9.11.60+dfsg-1.3+deb11u9, plus listed versions 8:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3+deb11u18:6.9.11.60+dfsg-1.3+deb11u28:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.3+deb11u4 Show 4 moreShow less8:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.3+deb11u68:6.9.11.60+dfsg-1.3+deb11u78:6.9.11.60+dfsg-1.3+deb11u8 |
8:6.9.11.60+dfsg-1.3+deb11u9 |
imagemagickDebian:12 From an advisory covering 3 CVEs |
before 8:6.9.11.60+dfsg-1.6+deb12u6, plus listed versions 8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u5 |
8:6.9.11.60+dfsg-1.6+deb12u6 |
imagemagickDebian:13 From an advisory covering 3 CVEs |
before 8:7.1.1.43+dfsg1-1+deb13u5, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u4 |
8:7.1.1.43+dfsg1-1+deb13u5 |
ImageMagick_jllJulia |
before 7.1.2023+0 | 7.1.2023+0 |
ImageMagickopenEuler:20.03-LTS-SP4 From an advisory covering 3 CVEs |
before 6.9.13.38-1.oe2003sp4 | 6.9.13.38-1.oe2003sp4 |
ImageMagickopenEuler:22.03-LTS-SP4 From an advisory covering 4 CVEs |
before 7.1.2.13-1.oe2203sp4 | 7.1.2.13-1.oe2203sp4 |
ImageMagickopenEuler:24.03-LTS From an advisory covering 4 CVEs |
before 7.1.2.13-1.oe2403 | 7.1.2.13-1.oe2403 |
ImageMagickopenEuler:24.03-LTS-SP1 From an advisory covering 4 CVEs |
before 7.1.2.13-1.oe2403sp1 | 7.1.2.13-1.oe2403sp1 |
ImageMagickopenEuler:24.03-LTS-SP2 From an advisory covering 4 CVEs |
before 7.1.2.13-1.oe2403sp2 | 7.1.2.13-1.oe2403sp2 |
ImageMagickopenEuler:24.03-LTS-SP3 From an advisory covering 4 CVEs |
before 7.1.2.13-1.oe2403sp3 | 7.1.2.13-1.oe2403sp3 |
ImageMagickRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-c++Red Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-debuginfoRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-perlRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-c++-develRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-develRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagick-docRed Hat:rhel_els:7 From an advisory covering 2 CVEs |
before 0:6.9.10.68-10.el7_9 | 0:6.9.10.68-10.el7_9 |
ImageMagickSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 3 CVEs |
before 6.8.8.1-71.227.1 | 6.8.8.1-71.227.1 |
ImageMagickSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 3 CVEs |
before 6.8.8.1-71.227.1 | 6.8.8.1-71.227.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 4 CVEs |
before 7.1.1.43-150700.3.33.1 | 7.1.1.43-150700.3.33.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 4 CVEs |
before 7.1.1.43-150700.3.33.1 | 7.1.1.43-150700.3.33.1 |
ImageMagickSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 4 CVEs |
before 7.1.1.21-150600.3.38.1 | 7.1.1.21-150600.3.38.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 4 CVEs |
before 7.1.1.21-150600.3.38.1 | 7.1.1.21-150600.3.38.1 |
ImageMagickopenSUSE:Leap 15.6 From an advisory covering 4 CVEs |
before 7.1.1.21-150600.3.38.1 | 7.1.1.21-150600.3.38.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 3 CVEs |
before 7.1.0.9-150400.6.64.1 | 7.1.0.9-150400.6.64.1 |
imagemagickUbuntu:Pro:14.04:LTS |
before 8:6.7.7.10-6ubuntu3.13+esm18, plus listed versions 8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3 Show 29 moreShow less8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm17 |
8:6.7.7.10-6ubuntu3.13+esm18 |
imagemagickUbuntu:Pro:16.04:LTS |
before 8:6.8.9.9-7ubuntu5.16+esm17, plus listed versions 8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1 Show 35 moreShow less8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm16 |
8:6.8.9.9-7ubuntu5.16+esm17 |
imagemagickUbuntu:Pro:18.04:LTS |
before 8:6.9.7.4+dfsg-16ubuntu6.15+esm9, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 19 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm8 |
8:6.9.7.4+dfsg-16ubuntu6.15+esm9 |
imagemagickUbuntu:Pro:20.04:LTS |
before 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 21 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm6 |
8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7 |
imagemagickUbuntu:Pro:22.04:LTS |
before 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7, plus listed versions 8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1 Show 14 moreShow less8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6 |
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7 |
imagemagickUbuntu:Pro:24.04:LTS |
before 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6, plus listed versions 8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 Show 4 moreShow less8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5 |
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6 |
imagemagickUbuntu:25.10 |
All versions, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.1 |
None known |
ImageMagickopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 7.1.2.13-2.1 | 7.1.2.13-2.1 |
ImageMagickopenSUSE:Leap 16.0 From an advisory covering 38 CVEs |
before 7.1.2.0-160000.6.1 | 7.1.2.0-160000.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-23876 is a high vulnerability (CVSS 8.1) in Imagemagick, published January 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.68%, the 52nd percentile. Fixed in ImageMagick 6.9.10.68-7.0.3.el7_9.tuxcare.els3.
References
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8
access.redhat.com/security/cve/CVE-2026-23876
bugzilla.redhat.com/show_bug.cgi?id=2431038
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23876.json
Show 109 moreShow less
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1770802828.html
nvd.nist.gov/vuln/detail/CVE-2026-23876
security-tracker.debian.org/tracker/CVE-2026-23876
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1241
cve.org/CVERecord?id=CVE-2025-62171
suse.com/support/update/announcement/2026/suse-su-20260384-1
bugzilla.suse.com/1256962
ubuntu.com/security/CVE-2026-23876