ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagickUpgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-libsUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagick-debugsource | Sep 30, 2026 | Jul 29, 2026 |
| Redhat_linux | — | No solution exists | Jul 31, 2026 | Jul 29, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub