Skip to content
OpenAdvisories
High RHSA-2026:3058 2 CVEs

Red Hat Security Advisory: ImageMagick security update

Published Feb 24, 2026 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++ 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++-devel 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-debuginfo 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-devel 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-doc 0:6.9.10.68-10.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-perl 0:6.9.10.68-10.el7_9

Vulnerabilities 2

  • High 8.1
    CVE-2026-23876

    Heap buffer overflow with attacker-controlled data in XBM parser

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data p…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu
  • Medium 5.9
    CVE-2025-62171

    ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems

    ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability o…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431038
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3058.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-62171
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-62171
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-62171
  • article
    https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
  • report
    https://access.redhat.com/security/cve/CVE-2026-23876
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23876
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23876
  • article
    https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8