Description
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ImageMagick | ImageMagick 7.1.1-9 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | imagemagick | 8:6.9.12.98+dfsg1-2 | — |
| Debian 13 | imagemagick | 8:6.9.12.98+dfsg1-2 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ImageMagick | 7.1.1.10-1.1 | openSUSE-SU-2024:12954-1 |
Advisories 2
- openSUSE-SU-2024:12954-1 ImageMagick-7.1.1.10-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-1258 ImageMagick: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 5, 2024