Every CVE Search/ Get API key

CVE-2026-31853

ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

5.7 MediumFix available

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.11%Up 0.1 points since Mar 12, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.7

ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
CVE-2026-31853
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2026-11243 5.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
EUVD-2026-11243
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-56jp-jfqg-f8f4 5.7

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images.

Record
GHSA-56jp-jfqg-f8f4
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 5.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
CVE-2026-31853
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-122
Updated
2026-11-02
OSVALPINE-CVE-2026-31853 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
ALPINE-CVE-2026-31853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 5.7

ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
CVE-2026-31853
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
Show 21 moreShow less
OSVDEBIAN-CVE-2026-31853 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
DEBIAN-CVE-2026-31853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-56jp-jfqg-f8f4 5.7

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images.

Record
GHSA-56jp-jfqg-f8f4
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
OSVJLSEC-2026-988 5.5

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
JLSEC-2026-988
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-31853 5.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Record
UBUNTU-CVE-2026-31853
CVSS 3.1
5.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1780672432 No score

ImageMagick: Fix of 4 CVEs

  • CVE-2026-30883: fix heap buffer overflow in the PNG encoder when writing extremely large raw profiles
  • CVE-2026-28692: fix 32-bit integer arithmetic in the MAT decoder row-size computation causing a heap over-read
  • CVE-2026-31853: fix broken 32-bit overflow check in the SFW decoder buffer allocation
  • CVE-2026-28689: enforce path policy rights at file-open time and honor a new system 'follow' policy to prevent symlink TOCTOU policy bypass
Record
CLSA-2026-1780672432
Updated
2026-11-02
OSVCLSA-2026-1780673307 No score

ImageMagick: Fix of 4 CVEs

  • CVE-2026-30883: fix heap buffer overflow in the PNG encoder when writing extremely large raw profiles
  • CVE-2026-28692: fix 32-bit integer arithmetic in the MAT decoder row-size computation causing a heap over-read
  • CVE-2026-31853: fix broken 32-bit overflow check in the SFW decoder buffer allocation
  • CVE-2026-28689: enforce path policy rights at file-open time and honor a new system 'follow' policy to prevent symlink TOCTOU policy bypass
Record
CLSA-2026-1780673307
Updated
2026-11-02
OSVopenSUSE-SU-2026:10386-1 No score

ImageMagick-7.1.2.17-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10386-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20405-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
  • CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain="path" authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30929: improper use of fixed-size stack buffer in MagnifyImagecan lead to a stack buffer overflow (bsc#1259468).
  • CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469).
  • CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497).
  • CVE-2026-30936: heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464).
  • CVE-2026-30937: heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
Record
openSUSE-SU-2026:20405-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20747-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issue

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
Record
openSUSE-SU-2026:20747-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-31853 No score

CVE-2026-31853 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-31853 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-31853
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-31853 No score

CVE-2026-31853 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-31853 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-31853
Updated
2026-11-02
OSVSUSE-SU-2026:1201-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain='path' authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).
  • CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879).
Record
SUSE-SU-2026:1201-1
Updated
2026-11-02
OSVSUSE-SU-2026:1202-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
  • CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain='path' authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30929: improper use of fixed-size stack buffer in MagnifyImagecan lead to a stack buffer overflow (bsc#1259468).
  • CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469).
  • CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497).
  • CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464).
  • CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612).
  • CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872).
  • CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).
  • CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879).
Record
SUSE-SU-2026:1202-1
Updated
2026-11-02
OSVSUSE-SU-2026:1203-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain='path' authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30929: improper use of fixed-size stack buffer in MagnifyImagecan lead to a stack buffer overflow (bsc#1259468).
  • CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497).
  • CVE-2026-30936: Heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464).
  • CVE-2026-30937: Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-32259: memory allocation fails can lead to out of bound write (bsc#1259612).
  • CVE-2026-32636: Denial of Service via out-of-bounds write in NewXMLTree method (bsc#1259872).
  • CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).
  • CVE-2026-33536: Denial of Service via out-of-bounds write (bsc#1260879).
Record
SUSE-SU-2026:1203-1
Updated
2026-11-02
OSVSUSE-SU-2026:1497-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion (bsc#1258790).
  • CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain='path' authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30929: improper use of fixed-size stack buffer in MagnifyImagecan lead to a stack buffer overflow (bsc#1259468).
  • CVE-2026-30936: heap buffer overflow in WaveletDenoiseImage (bsc#1259464).
  • CVE-2026-30937: heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-32259: memory allocation failure in the SIXEL encoder can lead to a stack out-of-bound write (bsc#1259612).
  • CVE-2026-32636: denial of service via out-of-bounds write in NewXMLTree method (bsc#1259872).
  • CVE-2026-33535: out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).
  • CVE-2026-33536: denial of Service via a stack out-of-bounds write in InterpretImageFilename (bsc#1260879).
  • CVE-2026-33905: denial of service via out-of-bounds read in -sample operation (bsc#1262097).
Record
SUSE-SU-2026:1497-1
Updated
2026-11-02
OSVSUSE-SU-2026:2020-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
Record
SUSE-SU-2026:2020-1
Updated
2026-11-02
OSVSUSE-SU-2026:2021-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
Record
SUSE-SU-2026:2021-1
Updated
2026-11-02
OSVSUSE-SU-2026:2022-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
Record
SUSE-SU-2026:2022-1
Updated
2026-11-02
OSVSUSE-SU-2026:2023-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
Record
SUSE-SU-2026:2023-1
Updated
2026-11-02
OSVSUSE-SU-2026:20917-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
  • CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
  • CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447).
  • CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448).
  • CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
  • CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
  • CVE-2026-28689: domain="path" authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452).
  • CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).
  • CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455).
  • CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457).
  • CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of-bounds read or write (bsc#1259466).
  • CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467).
  • CVE-2026-30929: improper use of fixed-size stack buffer in MagnifyImagecan lead to a stack buffer overflow (bsc#1259468).
  • CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469).
  • CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497).
  • CVE-2026-30936: heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464).
  • CVE-2026-30937: heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463).
  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
Record
SUSE-SU-2026:20917-1
Updated
2026-11-02
OSVSUSE-SU-2026:21615-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issue

  • CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528).
Record
SUSE-SU-2026:21615-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Magick.NET-Q16-AnyCPU
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-OpenMP-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-OpenMP-x86
NuGet
 before 14.10.4
14.10.4
Show 79 moreShow less
Affected packages
PackageAffectedFixed
Magick.NET-Q16-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q16-x86
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-AnyCPU
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-arm64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-x64
NuGet
 before 14.10.4
14.10.4
Magick.NET-Q8-x86
NuGet
 before 14.10.4
14.10.4
imagemagick
Alpine:v3.23
 7.0.0-0 up to 7.1.2.17-r0
7.1.2.17-r0
imagemagick
Alpine:v3.24
 7.0.0-0 up to 7.1.2.17-r0
7.1.2.17-r0
ImageMagick
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-c++
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-c++-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-djvu
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick-perl
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_2.tuxcare.els7
6.9.13.25-1.el9_2.tuxcare.els7
ImageMagick
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-c++
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-c++-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-djvu
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
ImageMagick-perl
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
 before 6.9.13.25-1.el9_6.tuxcare.els7
6.9.13.25-1.el9_6.tuxcare.els7
imagemagick
Debian:12
 before 8:6.9.11.60+dfsg-1.6+deb12u8, plus listed versions
8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u7
8:6.9.11.60+dfsg-1.6+deb12u8
imagemagick
Debian:13
 before 8:7.1.1.43+dfsg1-1+deb13u7, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u6
8:7.1.1.43+dfsg1-1+deb13u7
imagemagick
Debian:14
 before 8:7.1.2.16+dfsg1-1, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1
Show 7 moreShow less
8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1
8:7.1.2.16+dfsg1-1
imagemagick
Debian:13
From an advisory covering 18 CVEs
 before 8:7.1.1.43+dfsg1-1+deb13u7, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u6
8:7.1.1.43+dfsg1-1+deb13u7
Magick.NET-Q16-AnyCPU
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.8.1001
14.10.4
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.101
14.10.4
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q16-HDRI-OpenMP-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.0
14.10.4
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.101
14.10.4
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.101
14.10.4
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.0
14.10.4
Magick.NET-Q16-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q16-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.1001
14.10.4
Magick.NET-Q16-x86
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.1001
14.10.4
Magick.NET-Q8-AnyCPU
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.8.1001
14.10.4
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.0
14.10.4
Magick.NET-Q8-arm64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.0
14.10.4
Magick.NET-Q8-x64
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.1001
14.10.4
Magick.NET-Q8-x86
NuGet
 before 14.10.4, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.1001
14.10.4
ImageMagick_jll
Julia
 before 7.1.2023+0
7.1.2023+0
ImageMagick
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 15 CVEs
 before 6.8.8.1-71.236.1
6.8.8.1-71.236.1
ImageMagick
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 15 CVEs
 before 6.8.8.1-71.236.1
6.8.8.1-71.236.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 23 CVEs
 before 7.1.1.43-150700.3.42.1
7.1.1.43-150700.3.42.1
ImageMagick
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 23 CVEs
 before 7.1.1.43-150700.3.42.1
7.1.1.43-150700.3.42.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 20 CVEs
 before 7.1.1.21-150600.3.50.1
7.1.1.21-150600.3.50.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 20 CVEs
 before 7.1.1.21-150600.3.50.1
7.1.1.21-150600.3.50.1
ImageMagick
openSUSE:Leap 15.6
From an advisory covering 20 CVEs
 before 7.1.1.21-150600.3.50.1
7.1.1.21-150600.3.50.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 21 CVEs
 before 7.1.0.9-150400.6.75.1
7.1.0.9-150400.6.75.1
ImageMagick
SUSE:Linux Enterprise Server 16.0
From an advisory covering 18 CVEs
 before 7.1.2.0-160000.7.1
7.1.2.0-160000.7.1
ImageMagick
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 18 CVEs
 before 7.1.2.0-160000.7.1
7.1.2.0-160000.7.1
imagemagick
Ubuntu:Pro:14.04:LTS
 before 8:6.7.7.10-6ubuntu3.13+esm24, plus listed versions
8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3
Show 35 moreShow less
8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm23
8:6.7.7.10-6ubuntu3.13+esm24
imagemagick
Ubuntu:Pro:16.04:LTS
 before 8:6.8.9.9-7ubuntu5.16+esm23, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 41 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm22
8:6.8.9.9-7ubuntu5.16+esm23
imagemagick
Ubuntu:Pro:18.04:LTS
 before 8:6.9.7.4+dfsg-16ubuntu6.15+esm15, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 25 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm14
8:6.9.7.4+dfsg-16ubuntu6.15+esm15
imagemagick
Ubuntu:Pro:20.04:LTS
 before 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11
Show 27 moreShow less
8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm12
8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13
imagemagick
Ubuntu:Pro:22.04:LTS
 before 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13, plus listed versions
8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
Show 20 moreShow less
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13
imagemagick
Ubuntu:Pro:24.04:LTS
 before 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12, plus listed versions
8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
Show 10 moreShow less
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12
imagemagick
Ubuntu:25.10
 All versions, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.1
 None known
ImageMagick
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 7.1.2.17-1.1
7.1.2.17-1.1
ImageMagick
openSUSE:Leap 16.0
From an advisory covering 18 CVEs
 before 7.1.2.0-160000.7.1
7.1.2.0-160000.7.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-31853 is a medium vulnerability (CVSS 5.7) in Imagemagick, published March 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.11%, the 1st percentile. Fixed in Magick.NET-Q16-AnyCPU 14.10.4.

References

Show 69 moreShow less
This page doesn't list everything

Left out here: 1,696 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open