ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1.2-17 and 6.9.13-42 fix the issue.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Mar 20, 2026 | Mar 18, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-debugsourceUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-libsUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagickUpgrade ImageMagick-doc | Apr 7, 2026 | Mar 18, 2026 |
| Debian | — | Upgrade imagemagick | Apr 16, 2026 | Apr 16, 2026 |
| Oracle_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-doc | Jun 12, 2026 | Mar 18, 2026 |
| Redhat_linux | — | Upgrade ImageMagick-perlNo solution existsUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Jun 17, 2026 | Mar 18, 2026 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-6-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-7-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-7t64 (Ubuntu Pro)Upgrade libmagickwand-6.q16-7t64 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libmagick++-6.q16-9t64 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-7t64 (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-7-extra (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-9t64 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-7t64 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-6 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickwand-6-headers (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3-extra (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extra (Ubuntu Pro)Upgrade libimage-magick-q16hdri-perl (Ubuntu Pro)Upgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8 (Ubuntu Pro) | Apr 1, 2026 | Mar 30, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 18, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub