Skip to content
OpenAdvisories
High DLA-4448-1 3 CVEs

imagemagick - security update

Published Jan 24, 2026 · Updated Jan 24, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 imagemagick 8:6.9.11.60+dfsg-1.3+deb11u9

Vulnerabilities 3

  • High 8.1

    Heap buffer overflow with attacker-controlled data in XBM parser

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data p…

  • Medium 6.5

    ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images …

  • Medium 5.5

    ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when writing to MSL format. Version 7.1…