Skip to content
OpenAdvisories
Medium ALAS2023-2026-1550 2 CVEs

Moderate: ImageMagick security update (Amazon Linux 2023)

Published Apr 13, 2026 · Updated Apr 13, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33536: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds write. Versions 7.1.2-18 and 6.9.13-43 patch the issue. CVE-2026-33535: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2023 ImageMagick 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-c++ 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-c++-debuginfo 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-c++-devel 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-debuginfo 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-debugsource 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-devel 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-doc 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-libs 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-libs-debuginfo 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-perl 1:6.9.13.43-1.amzn2023.0.1
Amazon Linux · 2023 ImageMagick-perl-debuginfo 1:6.9.13.43-1.amzn2023.0.1

Vulnerabilities 2

  • Medium 5.1
    CVE-2026-33536

    ImageMagick has an Out-of-bounds Write via InterpretImageFilename

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and th…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 4.0
    CVE-2026-33535

    ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 an…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33535.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-33536.html