Every CVE Search/ Get API key

CVE-2026-49219

ImageMagick: Policy Bypass can read disallowed files

5.5 MediumFix available

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.18%Up 0.2 points since Jun 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.5

ImageMagick: Policy Bypass can read disallowed files

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22, CWE-78, CWE-200, CWE-863
Updated
2026-11-02
EUVDEUVD-2026-36185 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
EUVD-2026-36185
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-xcjm-wqff-m669 5.5

ImageMagick: Policy Bypass can read disallowed files via symlink

An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink.

Record
GHSA-xcjm-wqff-m669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22, CWE-78, CWE-200, CWE-863
Updated
2026-11-02
NVD 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22, CWE-78, CWE-200, CWE-863
Updated
2026-11-02
OSVALPINE-CVE-2026-49219 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
ALPINE-CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSV 5.5

ImageMagick: Policy Bypass can read disallowed files

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200, CWE-22, CWE-78, CWE-863
Updated
2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2026-49219 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
DEBIAN-CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVGHSA-xcjm-wqff-m669 5.5

ImageMagick: Policy Bypass can read disallowed files via symlink

An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink.

Record
GHSA-xcjm-wqff-m669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200, CWE-22, CWE-78, CWE-863
Updated
2026-11-02
OSVJLSEC-2026-1027 5.5

ImageMagick: Policy Bypass can read disallowed files via symlink

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
JLSEC-2026-1027
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2026-2555 7.5

ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.

Security Fix(es):

(CVE-2026-48724)

(CVE-2026-48733)

(CVE-2026-48734)

(CVE-2026-49218)

(CVE-2026-49219)

Record
OESA-2026-2555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-49219 5.5

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Record
UBUNTU-CVE-2026-49219
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVCLSA-2026-1782134552 No score

ImageMagick: Fix of CVE-2026-49219

  • CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file
Record
CLSA-2026-1782134552
Updated
2026-11-02
OSVCLSA-2026-1782137496 No score

ImageMagick: Fix of CVE-2026-49219

  • CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file
Record
CLSA-2026-1782137496
Updated
2026-11-02
OSVCLSA-2026-1782137773 No score

ImageMagick: Fix of CVE-2026-49219

  • CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file
Record
CLSA-2026-1782137773
Updated
2026-11-02
OSVCLSA-2026-1782138366 No score

ImageMagick: Fix of CVE-2026-49219

  • CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file
Record
CLSA-2026-1782138366
Updated
2026-11-02
OSVMGASA-2026-0252 No score

Updated imagemagick packages fix security vulnerabilities

The updated packages fix numerous security vulnerabilities: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797. (CVE-2026-25797) Heap Buffer Underwrite in Floyd-Steinberg depth dithering. (CVE-2026-48724) Infinite Loop in subimage-search with crafted image. (CVE-2026-48733) Stack Overflow in MVG decoder. (CVE-2026-48734) Policy Bypass in DCM decoder could result in image with invalid dimensions. (CVE-2026-49218) Policy Bypass can read disallowed files. (CVE-2026-49219) Heap Buffer Over-Write in MAT decoder on 32-bit systems. (CVE-2026-48994) Policy Bypass can trigger out-of-Memory condition. (CVE-2026-53460) Heap Buffer Over-Write in ICON decoder due to incorrect loop. (CVE-2026-53461) Use-After-Free when allocation in CheckPrimitiveExtent fails. (CVE-2026-53462) Null Pointer Dereference in distort operation when passing incorrect arguments. (CVE-2026-53463) Memory Leak in wand option parser when providing invalid arguments. (CVE-2026-53464) Heap Buffer Over-Write in SF3 encoder when writing multi-frame image. (CVE-2026-53465) Heap Buffer Over-Read in XCF decoder due to integer conversion overflow. (CVE-2026-53466) Information Disclosure in MNG decoder because allocated memory is left unchanged. (CVE-2026-53467) Use-After-Free in crafted 8BIM when identifying an image. (CVE-2026-55510) Heap Buffer Overflow in ImageMagick MVG decoder. (CVE-2026-55577) Stack Overflow in MVG decoder due to missing depth check. (CVE-2026-55594) Infinite Loop in connected-components when providing invalid arguments. (CVE-2026-55595) Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments. (CVE-2026-55597) Policy Bypass in concatenate operation due to missing checks. (CVE-2026-55628)

Record
MGASA-2026-0252
Updated
2026-11-02
OSVopenSUSE-SU-2026:11061-1 No score

ImageMagick-7.1.2.25-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11061-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Magick.NET-Q16-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q16-x64
NuGet
 before 14.14.0
14.14.0
Show 77 moreShow less
Affected packages
PackageAffectedFixed
Magick.NET-Q16-x86
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-AnyCPU
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-arm64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-x64
NuGet
 before 14.14.0
14.14.0
Magick.NET-Q8-x86
NuGet
 before 14.14.0
14.14.0
imagemagick
Alpine:v3.23
 7.0.0-0 up to 7.1.2.24-r0
7.1.2.24-r0
imagemagick
Alpine:v3.24
 7.0.0-0 up to 7.1.2.24-r0
7.1.2.24-r0
ImageMagick
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-c++
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-c++-devel
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-devel
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-djvu
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-doc
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-libs
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick-perl
TuxCare:CentOS:8.5
 before 6.9.13.25-1.el8_5.tuxcare.els33
6.9.13.25-1.el8_5.tuxcare.els33
ImageMagick
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-c++
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-c++-devel
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-devel
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-djvu
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-doc
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-libs
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-perl
TuxCare:CentOS-Stream:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-c++
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-c++-devel
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-devel
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-djvu
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-doc
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-libs
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick-perl
TuxCare:CentOS:8.4
 before 6.9.13.25-1.el8_4.tuxcare.els33
6.9.13.25-1.el8_4.tuxcare.els33
ImageMagick
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-c++
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-c++-devel
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-devel
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-djvu
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-doc
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-libs
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
ImageMagick-perl
TuxCare:RHEL:8
 before 6.9.13.25-1.el8.tuxcare.els33
6.9.13.25-1.el8.tuxcare.els33
imagemagick
Debian:13
 before 8:7.1.1.43+dfsg1-1+deb13u10, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u4
Show 5 moreShow less
8:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u9
8:7.1.1.43+dfsg1-1+deb13u10
imagemagick
Debian:14
 before 8:7.1.2.24+dfsg1-1, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1
Show 12 moreShow less
8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1
8:7.1.2.24+dfsg1-1
Magick.NET-Q16-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q16-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-AnyCPU
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-arm64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-x64
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
Magick.NET-Q8-x86
NuGet
 before 14.14.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.2.014.3.014.4.014.5.014.6.014.7.0
14.14.0
ImageMagick_jll
Julia
 before 7.1.2028+0
7.1.2028+0
imagemagick
Mageia:10
From an advisory covering 21 CVEs
 before 7.1.2.27-1.mga10
7.1.2.27-1.mga10
imagemagick
Mageia:10
From an advisory covering 21 CVEs
 before 7.1.2.27-1.mga10.tainted
7.1.2.27-1.mga10.tainted
ImageMagick
openEuler:20.03-LTS-SP4
From an advisory covering 5 CVEs
 before 6.9.13.49-1.oe2003sp4
6.9.13.49-1.oe2003sp4
ImageMagick
openEuler:22.03-LTS-SP4
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2203sp4
7.1.2.24-1.oe2203sp4
ImageMagick
openEuler:24.03-LTS-SP1
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2403sp1
7.1.2.24-1.oe2403sp1
ImageMagick
openEuler:24.03-LTS-SP3
From an advisory covering 5 CVEs
 before 7.1.2.24-1.oe2403sp3
7.1.2.24-1.oe2403sp3
imagemagick
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3
Show 39 moreShow less
8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm238:6.7.7.10-6ubuntu3.13+esm248:6.7.7.10-6ubuntu3.13+esm258:6.7.7.10-6ubuntu3.13+esm268:6.7.7.10-6ubuntu3.13+esm27
 None known
imagemagick
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 45 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm228:6.8.9.9-7ubuntu5.16+esm238:6.8.9.9-7ubuntu5.16+esm248:6.8.9.9-7ubuntu5.16+esm258:6.8.9.9-7ubuntu5.16+esm26
 None known
imagemagick
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 29 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18
 None known
imagemagick
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11
Show 31 moreShow less
8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16
 None known
imagemagick
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
Show 24 moreShow less
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm128:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm138:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm158:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16
 None known
imagemagick
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
Show 14 moreShow less
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm118:6.9.12.98+dfsg1-5.2ubuntu0.1~esm128:6.9.12.98+dfsg1-5.2ubuntu0.1~esm138:6.9.12.98+dfsg1-5.2ubuntu0.1~esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15
 None known
imagemagick
Ubuntu:25.10
 All versions, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.1
 None known
imagemagick
Ubuntu:26.10
 All versions, plus listed versions
8:7.1.2.18+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.27+dfsg1-18:7.1.2.31+dfsg1-1
 None known
imagemagick
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1
Show 6 moreShow less
8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4
 None known
ImageMagick
openSUSE:Tumbleweed
From an advisory covering 25 CVEs
 before 7.1.2.25-2.1
7.1.2.25-2.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
affected, aliases, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-49219 is a medium vulnerability (CVSS 5.5) in Imagemagick, published June 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in Magick.NET-Q16-AnyCPU 14.14.0.

References

Show 79 moreShow less
This page doesn't list everything

Left out here: 1,741 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open