CVE-2026-62363
ImageMagick: Heap Buffer Over-Write in fx operation
5.0 MediumFix available
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.13%Unchanged since Jul 30, 2026
What each source reports
CVE List Score used
ImageMagick: Heap Buffer Over-Write in fx operation
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
CVE-2026-62363- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2026-50573
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
EUVD-2026-50573- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-422r-8c97-xcg4
ImageMagick: Heap Buffer Over-Write in fx operation
A heap buffer over-write can occur in the fx operation by passing a crafted argument.
- Record
GHSA-422r-8c97-xcg4- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
CVE-2026-62363- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSV
ImageMagick: Heap Buffer Over-Write in fx operation
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
CVE-2026-62363- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
DEBIAN-CVE-2026-62363- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVGHSA-422r-8c97-xcg4
ImageMagick: Heap Buffer Over-Write in fx operation
A heap buffer over-write can occur in the fx operation by passing a crafted argument.
- Record
GHSA-422r-8c97-xcg4- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVJLSEC-2026-1080
ImageMagick: Heap Buffer Over-Write in fx operation
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
JLSEC-2026-1080- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-3123
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
(CVE-2026-62343)
(CVE-2026-62363)
- Record
OESA-2026-3123- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-3124
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
(CVE-2026-62343)
(CVE-2026-62363)
- Record
OESA-2026-3124- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-3125
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
(CVE-2026-62343)
(CVE-2026-62363)
- Record
OESA-2026-3125- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-3127
ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.
Security Fix(es):
(CVE-2026-62343)
(CVE-2026-62363)
- Record
OESA-2026-3127- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-62363
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27.
- Record
UBUNTU-CVE-2026-62363- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11405-1 No score
ImageMagick-7.1.2.28-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11405-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21635-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004).
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
- CVE-2026-62946: integer overflow in JNX decoder leading to heap buffer overwrite when extremely large files are processed on 32-bit builds (bsc#1272580).
- CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided (bsc#1272577).
- CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check (bsc#1272953).
- Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
- Record
openSUSE-SU-2026:21635-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-62363 No score
CVE-2026-62363 in imagemagick - Patched by Root
Root has patched CVE-2026-62363 in the imagemagick package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2026-62363- Updated
- 2026-11-02
OSVSUSE-SU-2026:23312-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004).
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
- CVE-2026-62946: integer overflow in JNX decoder leading to heap buffer overwrite when extremely large files are processed on 32-bit builds (bsc#1272580).
- CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided (bsc#1272577).
- CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check (bsc#1272953).
- Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
- Record
SUSE-SU-2026:23312-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3414-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
- CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when processing extremely large files on 32-bit builds (bsc#1272580).
- CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided (bsc#1272577).
- GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
- Record
SUSE-SU-2026:3414-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:4376-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
- CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582).
- CVE-2026-62946: integer overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds (bsc#1272580).
- CVE-2026-64685: heap buffer over-read in BGR decoder due to missing end-of-file check (bsc#1272953).
- CVE-2026-66011: memory Leak when providing invalid options to the cli (bsc#1272577).
- CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696).
- CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711).
- CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
- CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797).
- CVE-2026-93586: use-after-free in the
ImagesToBlobmethod can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909).
- CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910).
- CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911).
- GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
- Record
SUSE-SU-2026:4376-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
Magick.NET-Q16-AnyCPUNuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-HDRI-AnyCPUNuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-HDRI-OpenMP-arm64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-HDRI-x64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-HDRI-x86NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-OpenMP-arm64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-OpenMP-x64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-arm64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-x64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-x86NuGet |
before 14.15.0 | 14.15.0 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Magick.NET-Q8-AnyCPUNuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q8-OpenMP-arm64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q8-OpenMP-x64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q8-arm64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q8-x64NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q8-x86NuGet |
before 14.15.0 | 14.15.0 |
Magick.NET-Q16-HDRI-arm64NuGet |
before 14.15.0 | 14.15.0 |
imagemagickDebian:13 |
before 8:7.1.1.43+dfsg1-1+deb13u13, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u108:7.1.1.43+dfsg1-1+deb13u118:7.1.1.43+dfsg1-1+deb13u12 Show 8 moreShow less8:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u9 |
8:7.1.1.43+dfsg1-1+deb13u13 |
imagemagickDebian:14 |
before 8:7.1.2.27+dfsg1-1, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1 Show 16 moreShow less8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.26+dfsg1-18:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1 |
8:7.1.2.27+dfsg1-1 |
Magick.NET-Q16-AnyCPUNuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-HDRI-AnyCPUNuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-HDRI-OpenMP-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-HDRI-x64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-HDRI-x86NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-OpenMP-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-OpenMP-x64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-x64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-x86NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-AnyCPUNuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-OpenMP-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-OpenMP-x64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-x64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q8-x86NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
Magick.NET-Q16-HDRI-arm64NuGet |
before 14.15.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0 |
14.15.0 |
ImageMagick_jllJulia |
before 7.1.2029+0 | 7.1.2029+0 |
ImageMagickopenEuler:24.03-LTS-SP1 From an advisory covering 2 CVEs |
before 7.1.2.27-1.oe2403sp1 | 7.1.2.27-1.oe2403sp1 |
ImageMagickopenEuler:24.03-LTS-SP3 From an advisory covering 2 CVEs |
before 7.1.2.27-1.oe2403sp3 | 7.1.2.27-1.oe2403sp3 |
ImageMagickopenEuler:24.03-LTS-SP4 From an advisory covering 2 CVEs |
before 7.1.2.27-1.oe2403sp4 | 7.1.2.27-1.oe2403sp4 |
ImageMagickopenEuler:22.03-LTS-SP4 From an advisory covering 2 CVEs |
before 7.1.2.27-1.oe2203sp4 | 7.1.2.27-1.oe2203sp4 |
ImageMagickSUSE:Linux Enterprise Server 16.0 From an advisory covering 7 CVEs |
before 7.1.2.0-160000.14.1 | 7.1.2.0-160000.14.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 7 CVEs |
before 7.1.2.0-160000.14.1 | 7.1.2.0-160000.14.1 |
ImageMagickSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 5 CVEs |
before 7.1.1.43-150700.3.76.1 | 7.1.1.43-150700.3.76.1 |
ImageMagickSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 5 CVEs |
before 7.1.1.43-150700.3.76.1 | 7.1.1.43-150700.3.76.1 |
ImageMagickSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 14 CVEs |
before 7.1.1.21-150600.3.87.1 | 7.1.1.21-150600.3.87.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 14 CVEs |
before 7.1.1.21-150600.3.87.1 | 7.1.1.21-150600.3.87.1 |
imagemagickUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3 Show 39 moreShow less8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm238:6.7.7.10-6ubuntu3.13+esm248:6.7.7.10-6ubuntu3.13+esm258:6.7.7.10-6ubuntu3.13+esm268:6.7.7.10-6ubuntu3.13+esm27 |
None known |
imagemagickUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1 Show 45 moreShow less8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm228:6.8.9.9-7ubuntu5.16+esm238:6.8.9.9-7ubuntu5.16+esm248:6.8.9.9-7ubuntu5.16+esm258:6.8.9.9-7ubuntu5.16+esm26 |
None known |
imagemagickUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 29 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18 |
None known |
imagemagickUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 31 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16 |
None known |
imagemagickUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1 Show 24 moreShow less8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm128:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm138:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm158:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16 |
None known |
imagemagickUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 Show 14 moreShow less8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm118:6.9.12.98+dfsg1-5.2ubuntu0.1~esm128:6.9.12.98+dfsg1-5.2ubuntu0.1~esm138:6.9.12.98+dfsg1-5.2ubuntu0.1~esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15 |
None known |
imagemagickUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1 Show 6 moreShow less8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4 |
None known |
ImageMagickopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 7.1.2.28-1.1 | 7.1.2.28-1.1 |
ImageMagickopenSUSE:Leap 16.0 From an advisory covering 7 CVEs |
before 7.1.2.0-160000.14.1 | 7.1.2.0-160000.14.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-62363 is a medium vulnerability (CVSS 5.0) in Imagemagick, published July 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in Magick.NET-Q16-AnyCPU 14.15.0.
References
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4
nvd.nist.gov/vuln/detail/CVE-2026-62363
security-tracker.debian.org/tracker/CVE-2026-62363
Show 41 moreShow less
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3123
suse.com/support/update/announcement/2026/suse-su-202623312-1
bugzilla.suse.com/1270004
ubuntu.com/security/CVE-2026-62363
cve.org/CVERecord?id=CVE-2026-62363
This page doesn't list everything
Left out here: 1,758 versions. The JSON record has them.