ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024. This leads to corrupting memory beyond the end of the allocated logmap buffer. This issue has been patched in version 7.1.2-1.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-c++-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-libsUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-debugsourceUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Sep 16, 2025 | Aug 13, 2025 |
| Debian | — | Upgrade imagemagick | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 13, 2025 |
| Suse | — | Upgrade libMagickWand-7_Q16HDRI10Upgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-7-upstream-openUpgrade ImageMagick-config-7-SUSEUpgrade libmagickcore-7_q16hdri10-32bitUpgrade libMagick++-develUpgrade libmagick-7_q16hdri5-32bitUpgrade ImageMagickUpgrade ImageMagick-config-7-upstream-websafeUpgrade libmagickwand-7_q16hdri10-32bitUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-develUpgrade ImageMagick-docUpgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-devel-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libmagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-7_Q16HDRI10Upgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI5Upgrade ImageMagick-config-7-upstream-secureUpgrade perl-PerlMagickUpgrade ImageMagick-config-7-upstream-limitedUpgrade libMagickWand-6_Q16-1 | Dec 5, 2025 | Sep 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Aug 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
