Every CVE Search/ Get API key

CVE-2026-48733

ImageMagick: Infinite Loop in subimage-search with crafted image

4.7 MediumFix available

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.09%Up 0.1 points since Jun 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.7

ImageMagick: Infinite Loop in subimage-search with crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
EUVDEUVD-2026-36180 4.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
EUVD-2026-36180
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5v62-8fq6-cp9m 4.7

ImageMagick has an Infinite Loop in subimage-search with crafted image

An infinite loop in the subimage-search operation can happen when using a crafted image.

Record
GHSA-5v62-8fq6-cp9m
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
NVD 4.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSVALPINE-CVE-2026-48733 4.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
ALPINE-CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 4.7

ImageMagick: Infinite Loop in subimage-search with crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2026-48733 4.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
DEBIAN-CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-5v62-8fq6-cp9m 4.7

ImageMagick has an Infinite Loop in subimage-search with crafted image

An infinite loop in the subimage-search operation can happen when using a crafted image.

Record
GHSA-5v62-8fq6-cp9m
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSVJLSEC-2026-1023 4.7

ImageMagick has an Infinite Loop in subimage-search with crafted image

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
JLSEC-2026-1023
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2555 7.5

ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

(CVE-2026-48724)

(CVE-2026-48733)

(CVE-2026-48734)

(CVE-2026-49218)

(CVE-2026-49219)

Record
OESA-2026-2555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-48733 4.7

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

Record
UBUNTU-CVE-2026-48733
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2026-0252 No score

Updated imagemagick packages fix security vulnerabilities

The updated packages fix numerous security vulnerabilities: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797. (CVE-2026-25797) Heap Buffer Underwrite in Floyd-Steinberg depth dithering. (CVE-2026-48724) Infinite Loop in subimage-search with crafted image. (CVE-2026-48733) Stack Overflow in MVG decoder. (CVE-2026-48734) Policy Bypass in DCM decoder could result in image with invalid dimensions. (CVE-2026-49218) Policy Bypass can read disallowed files. (CVE-2026-49219) Heap Buffer Over-Write in MAT decoder on 32-bit systems. (CVE-2026-48994) Policy Bypass can trigger out-of-Memory condition. (CVE-2026-53460) Heap Buffer Over-Write in ICON decoder due to incorrect loop. (CVE-2026-53461) Use-After-Free when allocation in CheckPrimitiveExtent fails. (CVE-2026-53462) Null Pointer Dereference in distort operation when passing incorrect arguments. (CVE-2026-53463) Memory Leak in wand option parser when providing invalid arguments. (CVE-2026-53464) Heap Buffer Over-Write in SF3 encoder when writing multi-frame image. (CVE-2026-53465) Heap Buffer Over-Read in XCF decoder due to integer conversion overflow. (CVE-2026-53466) Information Disclosure in MNG decoder because allocated memory is left unchanged. (CVE-2026-53467) Use-After-Free in crafted 8BIM when identifying an image. (CVE-2026-55510) Heap Buffer Overflow in ImageMagick MVG decoder. (CVE-2026-55577) Stack Overflow in MVG decoder due to missing depth check. (CVE-2026-55594) Infinite Loop in connected-components when providing invalid arguments. (CVE-2026-55595) Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments. (CVE-2026-55597) Policy Bypass in concatenate operation due to missing checks. (CVE-2026-55628)

Record
MGASA-2026-0252
Updated
2026-11-02
OSVopenSUSE-SU-2026:21071-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

Security issues:

  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
  • CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092).
  • CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).
  • CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder (bsc#1268102).
  • CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value (bsc#1268095).
  • CVE-2026-45624: Data exposure due to image processing vulnerability (bsc#1268096).
  • CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder (bsc#1268101).
  • CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images (bsc#1268112).
  • CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder (bsc#1268124).
  • CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder (bsc#1268126).
  • CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
  • CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check (bsc#1268123).
  • CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 (bsc#1268121).
  • CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute- cache service (bsc#1268120).
  • CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can connect to a magick -distribute-cache service (bsc#1268117).
  • CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge--response authentication model (bsc#1268114).
  • CVE-2026-47166: heap buffer over-read in the server process via an attacker who can connect to a magick -distribute- cache service (bsc#1268113).
  • CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering (bsc#1268116).
  • CVE-2026-48733: Infinite Loop in subimage-search with crafted image (bsc#1268119).
  • CVE-2026-48734: Stack Overflow in MVG decoder (bsc#1268122).
  • CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems (bsc#1268111).
  • CVE-2026-49218: denial of service due to a missing check in the DCM decoder (bsc#1268110).
  • CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory (bsc#1268108).
  • CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder (bsc#1268107).
  • CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation (bsc#1268105).
  • CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser (bsc#1268103).
  • CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out- of-bounds read (bsc#1268645).
  • CVE-2026-56368: memory leak in multiple coders that write raw pixel data (bsc#1269064).
  • CVE-2026-56370: out-of-bounds access in ConnectedComponentsImage() when processing connected-components:* artifacts with invalid indices (bsc#1269063).
  • CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes (bsc#1268879).
  • CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files (bsc#1268880).

Non security issue:

  • ImageMagick update 7.1.2.0-160000.9.1 is broken for softlinks (bsc#1265373).
Record
openSUSE-SU-2026:21071-1
Updated
2026-11-02
OSVSUSE-SU-2026:22378-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

Security issues:

  • CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).
  • CVE-2026-42326: Information disclosure via malicious IPTC input file (bsc#1268092).
  • CVE-2026-45031: Denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).
  • CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder (bsc#1268102).
  • CVE-2026-45359: Information Disclosure via Invalid Connected-Components Value (bsc#1268095).
  • CVE-2026-45624: Data exposure due to image processing vulnerability (bsc#1268096).
  • CVE-2026-45664: Denial of Service due to excessive resource use in MNG coder (bsc#1268101).
  • CVE-2026-46520: Denial of Service via out-of-bounds write when processing multiple images (bsc#1268112).
  • CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder (bsc#1268124).
  • CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder (bsc#1268126).
  • CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).
  • CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth check (bsc#1268123).
  • CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in the JP2 (bsc#1268121).
  • CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute- cache service (bsc#1268120).
  • CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can connect to a magick -distribute-cache service (bsc#1268117).
  • CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge--response authentication model (bsc#1268114).
  • CVE-2026-47166: heap buffer over-read in the server process via an attacker who can connect to a magick -distribute- cache service (bsc#1268113).
  • CVE-2026-48724: Heap Buffer Underwrite in Floyd-Steinberg depth dithering (bsc#1268116).
  • CVE-2026-48733: Infinite Loop in subimage-search with crafted image (bsc#1268119).
  • CVE-2026-48734: Stack Overflow in MVG decoder (bsc#1268122).
  • CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems (bsc#1268111).
  • CVE-2026-49218: denial of service due to a missing check in the DCM decoder (bsc#1268110).
  • CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory (bsc#1268108).
  • CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder (bsc#1268107).
  • CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation (bsc#1268105).
  • CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser (bsc#1268103).
  • CVE-2026-56367: ImageMagick contains an integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out- of-bounds read (bsc#1268645).
  • CVE-2026-56368: memory leak in multiple coders that write raw pixel data (bsc#1269064).
  • CVE-2026-56370: out-of-bounds access in ConnectedComponentsImage() when processing connected-components:* artifacts with invalid indices (bsc#1269063).
  • CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes (bsc#1268879).
  • CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files (bsc#1268880).

Non security issue:

  • ImageMagick update 7.1.2.0-160000.9.1 is broken for softlinks (bsc#1265373).
Record
SUSE-SU-2026:22378-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Magick.NET-Q16-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-x64
NuGet
 before 14.14.0
14.14.0
Show 47 moreShow less
Affected packages
PackageAffectedFixed
Magick.NET-Q16-x86
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-x86
NuGet
 before 14.14.0
14.14.0
imagemagick
Alpine:v3.23
 7.0.0-0 up to 7.1.2.24-r0
7.1.2.24-r0
imagemagick
Alpine:v3.24
 7.0.0-0 up to 7.1.2.24-r0
7.1.2.24-r0
imagemagick
Debian:12
 before 8:6.9.11.60+dfsg-1.6+deb12u11, plus listed versions
8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u108:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u3
Show 6 moreShow less
8:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u78:6.9.11.60+dfsg-1.6+deb12u88:6.9.11.60+dfsg-1.6+deb12u9
8:6.9.11.60+dfsg-1.6+deb12u11
imagemagick
Debian:14
 before 8:7.1.2.24+dfsg1-1, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1
Show 12 moreShow less
8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1
8:7.1.2.24+dfsg1-1
Magick.NET-Q16-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
ImageMagick_jll
Julia
 before 7.1.2028+0
7.1.2028+0
imagemagick
Mageia:10
From an advisory covering 21 CVEs
 before 7.1.2.27-1.mga10
7.1.2.27-1.mga10
imagemagick
Mageia:10
From an advisory covering 21 CVEs
 before 7.1.2.27-1.mga10.tainted
7.1.2.27-1.mga10.tainted
ImageMagick
openEuler:20.03-LTS-SP4
From an advisory covering 5 CVEs
 before 6.9.13.49-1.oe2003sp4
6.9.13.49-1.oe2003sp4
ImageMagick
openEuler:22.03-LTS-SP4
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2203sp4
7.1.2.24-1.oe2203sp4
ImageMagick
openEuler:24.03-LTS-SP1
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2403sp1
7.1.2.24-1.oe2403sp1
ImageMagick
openEuler:24.03-LTS-SP3
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2403sp3
7.1.2.24-1.oe2403sp3
ImageMagick
SUSE:Linux Enterprise Server 16.0
From an advisory covering 32 CVEs
 before 7.1.2.0-160000.10.1
7.1.2.0-160000.10.1
ImageMagick
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 32 CVEs
 before 7.1.2.0-160000.10.1
7.1.2.0-160000.10.1
imagemagick
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3
Show 39 moreShow less
8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm238:6.7.7.10-6ubuntu3.13+esm248:6.7.7.10-6ubuntu3.13+esm258:6.7.7.10-6ubuntu3.13+esm268:6.7.7.10-6ubuntu3.13+esm27
 None known
imagemagick
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 45 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm228:6.8.9.9-7ubuntu5.16+esm238:6.8.9.9-7ubuntu5.16+esm248:6.8.9.9-7ubuntu5.16+esm258:6.8.9.9-7ubuntu5.16+esm26
 None known
imagemagick
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 29 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18
 None known
imagemagick
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11
Show 31 moreShow less
8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16
 None known
imagemagick
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
Show 24 moreShow less
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm128:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm138:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm158:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16
 None known
imagemagick
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
Show 14 moreShow less
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm118:6.9.12.98+dfsg1-5.2ubuntu0.1~esm128:6.9.12.98+dfsg1-5.2ubuntu0.1~esm138:6.9.12.98+dfsg1-5.2ubuntu0.1~esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15
 None known
imagemagick
Ubuntu:25.10
 All versions, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.1
 None known
imagemagick
Ubuntu:26.10
 All versions, plus listed versions
8:7.1.2.18+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.27+dfsg1-18:7.1.2.31+dfsg1-1
 None known
imagemagick
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1
Show 6 moreShow less
8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4
 None known
ImageMagick
openSUSE:Leap 16.0
From an advisory covering 32 CVEs
 before 7.1.2.0-160000.10.1
7.1.2.0-160000.10.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-48733 is a medium vulnerability (CVSS 4.7) in Imagemagick, published June 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.09%, the 0th percentile. Fixed in Magick.NET-Q16-AnyCPU 14.14.0.

References

Show 116 moreShow less
This page doesn't list everything

Left out here: 1,741 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open