The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Sep 20, 2017 | May 5, 2016 |
| Amazon_linux | — | Upgrade ImageMagick | May 11, 2016 | May 5, 2016 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-doc | Jul 6, 2016 | May 5, 2016 |
| Debian | — | Upgrade imagemagickUpgrade graphicsmagick | May 16, 2016 | May 5, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick-nox11Upgrade ImageMagickUpgrade ImageMagick7-nox11 | Dec 10, 2025 | May 6, 2016 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | May 5, 2016 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | May 5, 2016 |
| Oracle Solaris | — | Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade image/imagemagick to version 6.9.4.2-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 24.3-0.175.3.9.0.3.0 on Solaris 11.3 | May 29, 2017 | May 5, 2016 |
| Oracle_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-doc | May 9, 2016 | May 3, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2016 |
| Suse | — | Upgrade perl-GraphicsMagickUpgrade ImageMagickUpgrade libMagickWand-6_Q16-1Upgrade libGraphicsMagick2Upgrade libMagickWand1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade libMagickCore1Upgrade GraphicsMagickUpgrade libMagickCore1-32bitUpgrade libMagick++-7_Q16HDRI4Upgrade libMagick++1Upgrade imagemagick-config-7-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1-32bit | May 7, 2016 | May 5, 2016 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade imagemagick-commonUpgrade libmagickcore4Upgrade libmagick++5Upgrade imagemagickUpgrade libmagick++4Upgrade libmagick++-6.q16-5v5 | Jun 2, 2016 | May 5, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub