Skip to content
OpenAdvisories
Medium ALAS2023-2026-1704 1 CVE

Moderate: ImageMagick security update (Amazon Linux 2023)

Published May 25, 2026 · Updated May 25, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42050: Stack buffer overflow in XTileImage

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2023 ImageMagick 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-c++ 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-c++-debuginfo 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-c++-devel 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-debuginfo 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-debugsource 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-devel 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-doc 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-libs 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-libs-debuginfo 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-perl 1:6.9.13.44-1.amzn2023.0.3
Amazon Linux · 2023 ImageMagick-perl-debuginfo 1:6.9.13.44-1.amzn2023.0.3

Vulnerabilities 1

  • Medium 5.5
    CVE-2026-42050

    ImageMagick: Stack buffer overflow in XTileImage

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-42050.html