5.3
Medium
CVE-2026-45664 ImageMagick is free and open-source software used for editing and manipulating digital images
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageMagick 7.1 | earliest → < 7.1.2-22 | 7.1.2-22 |
| ImageMagick 6.9 | earliest → < 6.9.13-47 | 6.9.13-47 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of ImageMagick
The 276 CVEs of ImageMagick →
CVE-2026-123273
ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder
7.1
High
CVE-2026-119124
ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause…
4.8
Medium
CVE-2026-119123
ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder
6.3
Medium
CVE-2026-116160
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate
4.8
Medium