ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-imagemagick | Mar 3, 2026 | Jul 14, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-imagemagickamazon-linux-ami-2-upgrade-imagemagick-camazon-linux-ami-2-upgrade-imagemagick-c-develamazon-linux-ami-2-upgrade-imagemagick-debuginfoamazon-linux-ami-2-upgrade-imagemagick-develamazon-linux-ami-2-upgrade-imagemagick-docamazon-linux-ami-2-upgrade-imagemagick-perl | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-imagemagickamazon-linux-2023-upgrade-imagemagick-camazon-linux-2023-upgrade-imagemagick-c-debuginfoamazon-linux-2023-upgrade-imagemagick-c-develamazon-linux-2023-upgrade-imagemagick-debuginfoamazon-linux-2023-upgrade-imagemagick-debugsourceamazon-linux-2023-upgrade-imagemagick-develamazon-linux-2023-upgrade-imagemagick-docamazon-linux-2023-upgrade-imagemagick-libsamazon-linux-2023-upgrade-imagemagick-libs-debuginfoamazon-linux-2023-upgrade-imagemagick-perlamazon-linux-2023-upgrade-imagemagick-perl-debuginfo | Aug 5, 2025 | Jul 14, 2025 | |
| Debian | debian-upgrade-imagemagick | Jul 16, 2025 | Jul 14, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 15, 2025 | Jul 14, 2025 | |
| Suse | — | suse-upgrade-imagemagicksuse-upgrade-imagemagick-config-6-susesuse-upgrade-imagemagick-config-6-upstreamsuse-upgrade-imagemagick-config-7-susesuse-upgrade-imagemagick-config-7-upstreamsuse-upgrade-imagemagick-config-7-upstream-limitedsuse-upgrade-imagemagick-config-7-upstream-opensuse-upgrade-imagemagick-config-7-upstream-securesuse-upgrade-imagemagick-config-7-upstream-websafesuse-upgrade-imagemagick-develsuse-upgrade-imagemagick-devel-32bitsuse-upgrade-imagemagick-docsuse-upgrade-imagemagick-extrasuse-upgrade-libmagick-7_q16hdri5suse-upgrade-libmagick-7_q16hdri5-32bitsuse-upgrade-libmagick-develsuse-upgrade-libmagick-devel-32bitsuse-upgrade-libmagickcore-6_q16-1suse-upgrade-libmagickcore-7_q16hdri10suse-upgrade-libmagickcore-7_q16hdri10-32bitsuse-upgrade-libmagickwand-6_q16-1suse-upgrade-libmagickwand-7_q16hdri10suse-upgrade-libmagickwand-7_q16hdri10-32bitsuse-upgrade-perl-perlmagick | Dec 5, 2025 | Jul 24, 2025 |
| Ubuntu | ubuntu-pro-upgrade-imagemagickubuntu-pro-upgrade-libmagick-5ubuntu-pro-upgrade-libmagick-6-q16-5v5ubuntu-pro-upgrade-libmagick-6-q16-7ubuntu-pro-upgrade-libmagick-6-q16-8ubuntu-pro-upgrade-libmagick-6-q16-9t64ubuntu-pro-upgrade-libmagick-6-q16hdri-7ubuntu-pro-upgrade-libmagick-6-q16hdri-8ubuntu-pro-upgrade-libmagick-6-q16hdri-9t64ubuntu-pro-upgrade-libmagickcore-6-q16-2ubuntu-pro-upgrade-libmagickcore-6-q16-2-extraubuntu-pro-upgrade-libmagickcore-6-q16-3ubuntu-pro-upgrade-libmagickcore-6-q16-3-extraubuntu-pro-upgrade-libmagickcore-6-q16-6ubuntu-pro-upgrade-libmagickcore-6-q16-6-extraubuntu-pro-upgrade-libmagickcore-6-q16-7-extraubuntu-pro-upgrade-libmagickcore-6-q16-7t64ubuntu-pro-upgrade-libmagickcore-6-q16hdri-3ubuntu-pro-upgrade-libmagickcore-6-q16hdri-3-extraubuntu-pro-upgrade-libmagickcore-6-q16hdri-6ubuntu-pro-upgrade-libmagickcore-6-q16hdri-6-extraubuntu-pro-upgrade-libmagickcore-6-q16hdri-7-extraubuntu-pro-upgrade-libmagickcore-6-q16hdri-7t64ubuntu-pro-upgrade-libmagickcore5ubuntu-pro-upgrade-libmagickcore5-extraubuntu-pro-upgrade-libmagickwand-6-q16-2ubuntu-pro-upgrade-libmagickwand-6-q16-3ubuntu-pro-upgrade-libmagickwand-6-q16-6ubuntu-pro-upgrade-libmagickwand-6-q16-7t64ubuntu-pro-upgrade-libmagickwand-6-q16hdri-3ubuntu-pro-upgrade-libmagickwand-6-q16hdri-6ubuntu-pro-upgrade-libmagickwand-6-q16hdri-7t64ubuntu-pro-upgrade-libmagickwand5 | Sep 3, 2025 | Sep 1, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Feb 9, 2026 | Jul 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub