Skip to content
OpenAdvisories
Medium RHSA-2026:17618 1 CVE

Red Hat Security Advisory: ImageMagick security update

Published May 15, 2026 · Updated Aug 18, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++ 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++-devel 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-debuginfo 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-devel 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-doc 0:6.9.10.68-16.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-perl 0:6.9.10.68-16.el7_9

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-32636

    ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9.13-42, the NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte. Versions 7.1…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448862
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17618.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-32636
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-32636
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-32636
  • article
    https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-17
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gc62-2v5p-qpmp
  • article
    https://github.com/dlemstra/Magick.NET/releases/tag/14.11.0