{"schemaVersion":3,"id":"MGASA-2026-0252","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated imagemagick packages fix security vulnerabilities\n\nThe updated packages fix numerous security vulnerabilities:\nCode injection in HTML encoder due to incomplete fix of CVE-2026-25797.\n(CVE-2026-25797)\nHeap Buffer Underwrite in Floyd-Steinberg depth dithering.\n(CVE-2026-48724)\nInfinite Loop in subimage-search with crafted image. (CVE-2026-48733)\nStack Overflow in MVG decoder. (CVE-2026-48734)\nPolicy Bypass in DCM decoder could result in image with invalid\ndimensions. (CVE-2026-49218)\nPolicy Bypass can read disallowed files. (CVE-2026-49219)\nHeap Buffer Over-Write in MAT decoder on 32-bit systems.\n(CVE-2026-48994)\nPolicy Bypass can trigger out-of-Memory condition. (CVE-2026-53460)\nHeap Buffer Over-Write in ICON decoder due to incorrect loop.\n(CVE-2026-53461)\nUse-After-Free when allocation in CheckPrimitiveExtent fails.\n(CVE-2026-53462)\nNull Pointer Dereference in distort operation when passing incorrect\narguments. (CVE-2026-53463)\nMemory Leak in wand option parser when providing invalid arguments.\n(CVE-2026-53464)\nHeap Buffer Over-Write in SF3 encoder when writing multi-frame image.\n(CVE-2026-53465)\nHeap Buffer Over-Read in XCF decoder due to integer conversion overflow.\n(CVE-2026-53466)\nInformation Disclosure in MNG decoder because allocated memory is left\nunchanged. (CVE-2026-53467)\nUse-After-Free in crafted 8BIM when identifying an image.\n(CVE-2026-55510)\nHeap Buffer Overflow in ImageMagick MVG decoder. (CVE-2026-55577)\nStack Overflow in MVG decoder due to missing depth check.\n(CVE-2026-55594)\nInfinite Loop in connected-components when providing invalid arguments.\n(CVE-2026-55595)\nHeap Buffer Over-Write in JP2 encoder when due to incorrect handling of\narguments. (CVE-2026-55597)\nPolicy Bypass in concatenate operation due to missing checks.\n(CVE-2026-55628)","dates":{"published":"2026-07-14T16:40:11.000Z","modified":"2026-07-14T16:50:08.337Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"imagemagick","name":"imagemagick","label":"imagemagick","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/imagemagick","purlType":"rpm","versions":[{"text":"< 7.1.2.27-1.mga10","noFixRecorded":false,"fixedIn":null},{"text":"< 7.1.2.27-1.mga10.tainted","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2.27-1.mga10 | < 7.1.2.27-1.mga10.tainted","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0252.html","label":"advisories.mageia.org/MGASA-2026-0252.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35866","label":"bugs.mageia.org/show_bug.cgi?id=35866","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8pj9-6897-74xc","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8pj9-6897-74xc","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4v89-6mgq-6rgc","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4v89-6mgq-6rgc","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q62c-h75r-2xhc","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q62c-h75r-2xhc","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g22q-f7gc-5jhr","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g22q-f7gc-5jhr","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-px7q-ggqj-hcf2","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-px7q-ggqj-hcf2","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-44cp-c3ww-9rv5","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-44cp-c3ww-9rv5","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h5r4-w88w-7ccr","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h5r4-w88w-7ccr","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h58x-r7f7-rh84","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h58x-r7f7-rh84","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r628-69v2-2f9c","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r628-69v2-2f9c","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h7f2-f9cc-h2gv","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h7f2-f9cc-h2gv","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-99w9-hv66-rfv7","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-99w9-hv66-rfv7","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j8rh-v2r8-v94x","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j8rh-v2r8-v94x","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7c7m-fpjw-gwcq","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7c7m-fpjw-gwcq","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6vxp-gfwf-hcr9","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6vxp-gfwf-hcr9","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hwf3-r46v-5ggx","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hwf3-r46v-5ggx","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8g53-9m3c-69xg","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8g53-9m3c-69xg","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvxh-prvr-85w2","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvxh-prvr-85w2","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-ff5c-8x9r-8qcw","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-ff5c-8x9r-8qcw","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vghg-5jrg-2398","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vghg-5jrg-2398","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw2","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw2","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hc76-7mpc-qjqh","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hc76-7mpc-qjqh","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qhmf-7fc4-8q3h","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qhmf-7fc4-8q3h","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-56m6-8q75-f2rw","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-56m6-8q75-f2rw","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wx47-rm3x-jx6p","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wx47-rm3x-jx6p","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mx48-2qq3-23hf","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mx48-2qq3-23hf","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-76q6-2p6h-xjqr","label":"github.com/ImageMagick/ImageMagick/security/advisories/GHSA-76q6-2p6h-xjqr","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2026-25797","CVE-2026-48724","CVE-2026-48733","CVE-2026-48734","CVE-2026-48994","CVE-2026-49218","CVE-2026-49219","CVE-2026-53460","CVE-2026-53461","CVE-2026-53462","CVE-2026-53463","CVE-2026-53464","CVE-2026-53465","CVE-2026-53466","CVE-2026-53467","CVE-2026-55510","CVE-2026-55577","CVE-2026-55594","CVE-2026-55595","CVE-2026-55597","CVE-2026-55628"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-07-14T16:40:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-14T16:50:08.337Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:35:18.524Z","stale":false,"partial":false}}