Description
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ImageMagick | Fixed in ImageMagick 7.1.0-47, ImageMagick 6.9.12-62 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | imagemagick | 8:6.9.12.98+dfsg1-2 | — |
| Debian 13 | imagemagick | 8:6.9.12.98+dfsg1-2 | — |
| Debian 12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | ImageMagick | 7.1.0.9-150400.6.9.1 | SUSE-SU-2022:3487-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ImageMagick | 7.1.1.17-1.1 | openSUSE-SU-2024:13263-1 |
| openSUSE Leap 15.4 | ImageMagick | 7.1.0.9-150400.6.9.1 | SUSE-SU-2022:3487-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.24 | tiff | 4.5.0-r0 | — |
| Alpine v3.23 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.23 | tiff | 4.5.0-r0 | — |
| Alpine v3.22 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.22 | tiff | 4.5.0-r0 | — |
| Alpine v3.21 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.21 | tiff | 4.5.0-r0 | — |
| Alpine v3.20 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.20 | tiff | 4.5.0-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.19 | tiff | 4.5.0-r0 | — |
| Alpine v3.18 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.18 | tiff | 4.5.0-r0 | — |
| Alpine v3.17 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.16 | imagemagick | 7.1.0.47-r0 | — |
| Alpine v3.16 | imagemagick6 | 6.9.12.65-r0 | — |
| Alpine v3.15 | imagemagick6 | 6.9.12.65-r0 | — |
Advisories 3
- SUSE-SU-2022:3487-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13263-1 ImageMagick-7.1.1.17-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-1431 ImageMagick: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 5, 2024