ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerability is fixed in 7.1.2-21 and 6.9.13-46.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | May 29, 2026 | May 11, 2026 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-debuginfo | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-libsUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-debugsourceUpgrade ImageMagick-c++-debuginfo | May 19, 2026 | May 11, 2026 |
| Debian | — | Upgrade imagemagick | May 31, 2026 | May 31, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub