Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ImageMagick | ImageMagick | < 7.1.2-1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | imagemagick | 8:7.1.2.1+dfsg1-1 | — |
| Debian 13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | imagemagick | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1, SUSE-SU-2025:03113-1 |
| SLES 15 SP6 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03164-1, SUSE-SU-2025:03152-1 |
| SLES 15 SP5 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLES 15 SP4 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLES 15 SP3 | ImageMagick | 7.0.7.34-150200.10.62.1 | SUSE-SU-2025:03151-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP5 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLES for SAP 15 SP4 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLES for SAP 15 SP3 | ImageMagick | 7.0.7.34-150200.10.62.1 | SUSE-SU-2025:03151-1 |
| SLE HPC 15 SP5 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLE HPC 15 SP4 | ImageMagick | 7.1.0.9-150400.6.40.1 | SUSE-SU-2025:03152-1 |
| SLE HPC 15 SP3 | ImageMagick | 7.0.7.34-150200.10.62.1 | SUSE-SU-2025:03151-1 |
| SUSE Enterprise Storage 7.1 | ImageMagick | 7.0.7.34-150200.10.62.1 | SUSE-SU-2025:03151-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | ImageMagick | 7.1.1.21-150600.3.20.1 | SUSE-SU-2025:03164-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ImageMagick +6 | 1:6.9.12.82-1.amzn2023.0.11 | ALAS2023-2025-1182 |
| Amazon Linux 2 | ImageMagick +5 | 6.9.10.97-1.amzn2.0.16 | ALAS2-2025-3000 |
Affected packages
Advisories 7
- WID-SEC-2025-1813 ImageMagick: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- SUSE-SU-2025:03152-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03151-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03164-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:03113-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2025-3000 Important: ImageMagick security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 16, 2025
- ALAS2023-2025-1182 Important: ImageMagick security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Sep 15, 2025