ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Jul 29, 2026 | Jun 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++-devel | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-debugsourceUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-libsUpgrade ImageMagick-c++-devel | Jun 23, 2026 | Jun 10, 2026 |
| Debian | — | Upgrade imagemagick | Jun 24, 2026 | Jun 24, 2026 |
| Redhat_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-devel | Jul 1, 2026 | Jun 10, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 26, 2026 | Jun 10, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub