7.5
High
CVE-2026-28691 ImageMagick is free and open-source software used for editing and manipulating digital images
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| ImageMagick 7.0 | 7.0.0 → < 7.1.2-16 | 7.1.2-16 |
| ImageMagick 6.9 | earliest → < 6.9.13-41 | 6.9.13-41 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux Server (v. 7 ELS)
The 214 CVEs of Red Hat Enterprise Linux Server (v. 7 ELS) →
CVE-2026-56379
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…
9.2
Critical
CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
7.6
High
CVE-2026-12329
Memory safety bug fixed in Thunderbird ESR 140.12
5.3
Medium
CVE-2026-12328
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…
8.1
High