Every CVE Search/ Get API key

CVE-2026-61464

ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11

1.0 LowFix available

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
Passive

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.09%Unchanged since Jul 16, 2026
90%50%10%1%

What each source reports

CVE List Score used 1.0

ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
CVE-2026-61464
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2026-44652 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
EUVD-2026-44652
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-76q6-2p6h-xjqr 1.8

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

Running an X11 import with a crafted window title can result in a heap buffer over-write.

Record
GHSA-76q6-2p6h-xjqr
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-122
Updated
2026-11-02
GitHub AdvisoriesGHSA-mqfp-wcwx-w65x 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability...

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
GHSA-mqfp-wcwx-w65x
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-122
Updated
2026-11-02
NVD 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
CVE-2026-61464
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-122
Updated
2026-11-02
OSV 1.0

ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
CVE-2026-61464
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-122
Updated
2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2026-61464 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
DEBIAN-CVE-2026-61464
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVGHSA-76q6-2p6h-xjqr 1.8

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title

Running an X11 import with a crafted window title can result in a heap buffer over-write.

Record
GHSA-76q6-2p6h-xjqr
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-122
Updated
2026-11-02
OSVJLSEC-2026-1061 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability...

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
JLSEC-2026-1061
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVOESA-2026-4269 8.8

GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler's SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.(CVE-2026-56379)

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.(CVE-2026-61464)

Record
OESA-2026-4269
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4270 8.8

GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler's SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.(CVE-2026-56379)

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.(CVE-2026-61464)

Record
OESA-2026-4270
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4271 8.8

GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler's SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.(CVE-2026-56379)

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.(CVE-2026-61464)

Record
OESA-2026-4271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4272 8.8

GraphicsMagick security update

GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler's SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.

Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.(CVE-2026-56379)

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.(CVE-2026-61464)

Record
OESA-2026-4272
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-61464 1.0

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Record
UBUNTU-CVE-2026-61464
CVSS 4.0
1.0 LowCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
1.8 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2026:11310-1 No score

ImageMagick-7.1.2.27-3.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11310-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11414-1 No score

GraphicsMagick-1.3.48-1.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.48-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11414-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21426-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
  • CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61859: Policy Bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: Use-After-Free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61862: Information Disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: Memory Leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: Memory Leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: Memory Leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: Memory Leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: Memory Leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: Memory Leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: Memory Leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61871: Memory Leak in ICON decoder when allocation fails (bsc#1271485).
  • CVE-2026-61872: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
openSUSE-SU-2026:21426-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21468-1 No score

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue

  • CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496).
Record
openSUSE-SU-2026:21468-1
Updated
2026-11-02
OSVSUSE-SU-2026:22861-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878).
  • CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61859: Policy Bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: Use-After-Free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61862: Information Disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: Memory Leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: Memory Leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: Memory Leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: Memory Leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: Memory Leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: Memory Leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: Memory Leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61871: Memory Leak in ICON decoder when allocation fails (bsc#1271485).
  • CVE-2026-61872: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
SUSE-SU-2026:22861-1
Updated
2026-11-02
OSVSUSE-SU-2026:3192-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
SUSE-SU-2026:3192-1
Updated
2026-11-02
OSVSUSE-SU-2026:3193-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
SUSE-SU-2026:3193-1
Updated
2026-11-02
OSVSUSE-SU-2026:3194-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61871: memory leak in ICON decoder when allocation fails (bsc#1271485).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
Record
SUSE-SU-2026:3194-1
Updated
2026-11-02
OSVSUSE-SU-2026:3219-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
  • Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
Record
SUSE-SU-2026:3219-1
Updated
2026-11-02
OSVSUSE-SU-2026:3395-1 No score

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue:

  • CVE-2026-61464: heap buffer overwrite when running an X11 import with a crafted window title (bsc#1271496).
Record
SUSE-SU-2026:3395-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Magick.NET-Q16-AnyCPU
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-arm64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-x64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-x86
NuGet
 before 14.15.0
14.15.0
Show 56 moreShow less
Affected packages
PackageAffectedFixed
Magick.NET-Q8-AnyCPU
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q8-arm64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q8-x64
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q8-x86
NuGet
 before 14.15.0
14.15.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.15.0
14.15.0
graphicsmagick
Debian:12
 All versions, plus listed versions
1.4+really1.3.40-41.4+really1.3.40-4+deb12u11.4+really1.3.41-11.4+really1.3.42-11.4+really1.3.42-1.1
Show 12 moreShow less
1.4+really1.3.42-1.1~exp11.4+really1.3.43-11.4+really1.3.44-11.4+really1.3.45+hg17689-11.4+really1.3.45+hg17692-11.4+really1.3.45+hg17696-11.4+really1.3.45-11.4+really1.3.46-11.4+really1.3.46-21.4+really1.3.48-11.4+really1.3.48-21.4+really1.3.49-1
 None known
graphicsmagick
Debian:13
 All versions, plus listed versions
1.4+really1.3.45+hg17696-11.4+really1.3.46-11.4+really1.3.46-21.4+really1.3.48-11.4+really1.3.48-21.4+really1.3.49-1
 None known
graphicsmagick
Debian:14
 before 1.4+really1.3.49-1, plus listed versions
1.4+really1.3.45+hg17696-11.4+really1.3.46-11.4+really1.3.46-21.4+really1.3.48-11.4+really1.3.48-2
1.4+really1.3.49-1
imagemagick
Debian:12
 before 8:6.9.11.60+dfsg-1.6+deb12u13, plus listed versions
8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u108:6.9.11.60+dfsg-1.6+deb12u118:6.9.11.60+dfsg-1.6+deb12u12
Show 8 moreShow less
8:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u78:6.9.11.60+dfsg-1.6+deb12u88:6.9.11.60+dfsg-1.6+deb12u9
8:6.9.11.60+dfsg-1.6+deb12u13
imagemagick
Debian:13
 before 8:7.1.1.43+dfsg1-1+deb13u12, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u108:7.1.1.43+dfsg1-1+deb13u118:7.1.1.43+dfsg1-1+deb13u2
Show 7 moreShow less
8:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u9
8:7.1.1.43+dfsg1-1+deb13u12
imagemagick
Debian:14
 before 8:7.1.2.26+dfsg1-1, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1
Show 15 moreShow less
8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1
8:7.1.2.26+dfsg1-1
Magick.NET-Q16-AnyCPU
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-x64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-x86
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-AnyCPU
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-x64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q8-x86
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.15.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.10.314.10.414.11.014.11.114.12.014.13.014.13.114.14.014.2.014.3.014.4.014.5.014.6.0
14.15.0
ImageMagick_jll
Julia
 before 7.1.2028+0
7.1.2028+0
GraphicsMagick
openEuler:22.03-LTS-SP4
From an advisory covering 4 CVEs
 before 1.3.49-1.oe2203sp4
1.3.49-1.oe2203sp4
GraphicsMagick
openEuler:24.03-LTS-SP1
From an advisory covering 4 CVEs
 before 1.3.49-1.oe2403sp1
1.3.49-1.oe2403sp1
GraphicsMagick
openEuler:24.03-LTS-SP3
From an advisory covering 4 CVEs
 before 1.3.49-1.oe2403sp3
1.3.49-1.oe2403sp3
GraphicsMagick
openEuler:24.03-LTS-SP4
From an advisory covering 4 CVEs
 before 1.3.49-1.oe2403sp4
1.3.49-1.oe2403sp4
ImageMagick
SUSE:Linux Enterprise Server 16.0
From an advisory covering 15 CVEs
 before 7.1.2.0-160000.13.1
7.1.2.0-160000.13.1
ImageMagick
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 15 CVEs
 before 7.1.2.0-160000.13.1
7.1.2.0-160000.13.1
ImageMagick
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 6.8.8.1-71.264.1
6.8.8.1-71.264.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 23 CVEs
 before 7.1.0.9-150400.6.101.1
7.1.0.9-150400.6.101.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 25 CVEs
 before 7.1.1.43-150700.3.70.1
7.1.1.43-150700.3.70.1
ImageMagick
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 25 CVEs
 before 7.1.1.43-150700.3.70.1
7.1.1.43-150700.3.70.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 25 CVEs
 before 7.1.1.21-150600.3.80.2
7.1.1.21-150600.3.80.2
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 25 CVEs
 before 7.1.1.21-150600.3.80.2
7.1.1.21-150600.3.80.2
GraphicsMagick
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 1.3.42-150600.3.39.1
1.3.42-150600.3.39.1
imagemagick
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3
Show 39 moreShow less
8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm108:6.7.7.10-6ubuntu3.13+esm118:6.7.7.10-6ubuntu3.13+esm128:6.7.7.10-6ubuntu3.13+esm138:6.7.7.10-6ubuntu3.13+esm148:6.7.7.10-6ubuntu3.13+esm158:6.7.7.10-6ubuntu3.13+esm168:6.7.7.10-6ubuntu3.13+esm178:6.7.7.10-6ubuntu3.13+esm188:6.7.7.10-6ubuntu3.13+esm198:6.7.7.10-6ubuntu3.13+esm208:6.7.7.10-6ubuntu3.13+esm218:6.7.7.10-6ubuntu3.13+esm228:6.7.7.10-6ubuntu3.13+esm238:6.7.7.10-6ubuntu3.13+esm248:6.7.7.10-6ubuntu3.13+esm258:6.7.7.10-6ubuntu3.13+esm268:6.7.7.10-6ubuntu3.13+esm27
 None known
imagemagick
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 45 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm108:6.8.9.9-7ubuntu5.16+esm118:6.8.9.9-7ubuntu5.16+esm128:6.8.9.9-7ubuntu5.16+esm138:6.8.9.9-7ubuntu5.16+esm148:6.8.9.9-7ubuntu5.16+esm158:6.8.9.9-7ubuntu5.16+esm168:6.8.9.9-7ubuntu5.16+esm178:6.8.9.9-7ubuntu5.16+esm188:6.8.9.9-7ubuntu5.16+esm198:6.8.9.9-7ubuntu5.16+esm208:6.8.9.9-7ubuntu5.16+esm218:6.8.9.9-7ubuntu5.16+esm228:6.8.9.9-7ubuntu5.16+esm238:6.8.9.9-7ubuntu5.16+esm248:6.8.9.9-7ubuntu5.16+esm258:6.8.9.9-7ubuntu5.16+esm26
 None known
imagemagick
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 29 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18
 None known
imagemagick
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11
Show 31 moreShow less
8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16
 None known
imagemagick
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
Show 24 moreShow less
8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm18:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm28:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm48:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm58:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm68:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm78:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm88:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm98:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm108:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm118:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm128:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm138:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm158:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16
 None known
imagemagick
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
8:6.9.11.60+dfsg-1.6ubuntu18:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.2build18:6.9.12.98+dfsg1-5.2build28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
Show 14 moreShow less
8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm28:6.9.12.98+dfsg1-5.2ubuntu0.1~esm38:6.9.12.98+dfsg1-5.2ubuntu0.1~esm48:6.9.12.98+dfsg1-5.2ubuntu0.1~esm58:6.9.12.98+dfsg1-5.2ubuntu0.1~esm68:6.9.12.98+dfsg1-5.2ubuntu0.1~esm78:6.9.12.98+dfsg1-5.2ubuntu0.1~esm88:6.9.12.98+dfsg1-5.2ubuntu0.1~esm98:6.9.12.98+dfsg1-5.2ubuntu0.1~esm108:6.9.12.98+dfsg1-5.2ubuntu0.1~esm118:6.9.12.98+dfsg1-5.2ubuntu0.1~esm128:6.9.12.98+dfsg1-5.2ubuntu0.1~esm138:6.9.12.98+dfsg1-5.2ubuntu0.1~esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15
 None known
imagemagick
Ubuntu:26.10
 All versions, plus listed versions
8:7.1.2.18+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.27+dfsg1-18:7.1.2.31+dfsg1-1
 None known
imagemagick
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1
Show 6 moreShow less
8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4
 None known
ImageMagick
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 7.1.2.27-3.1
7.1.2.27-3.1
GraphicsMagick
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.3.48-1.1
1.3.48-1.1
ImageMagick
openSUSE:Leap 16.0
From an advisory covering 15 CVEs
 before 7.1.2.0-160000.13.1
7.1.2.0-160000.13.1
GraphicsMagick
openSUSE:Leap 16.0
 before 1.3.45-160000.11.1
1.3.45-160000.11.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-61464 is a low vulnerability (CVSS 1.0) in Imagemagick, published July 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.09%, the 0th percentile. Fixed in Magick.NET-Q16-AnyCPU 14.15.0.

References

Show 71 moreShow less
This page doesn't list everything

Left out here: 1,758 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open