Skip to content
OpenAdvisories
Medium ALAS2023-2026-1511 1 CVE

Moderate: ImageMagick security update (Amazon Linux 2023)

Published Mar 30, 2026 · Updated Apr 1, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32636: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1.2-17 and 6.9.13-42 fix the issue.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2023 ImageMagick 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-c++ 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-c++-debuginfo 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-c++-devel 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-debuginfo 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-debugsource 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-devel 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-doc 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-libs 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-libs-debuginfo 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-perl 1:6.9.13.41-1.amzn2023.0.2
Amazon Linux · 2023 ImageMagick-perl-debuginfo 1:6.9.13.41-1.amzn2023.0.2

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-32636

    ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-32636.html