Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27798

Fixed in a distro release EPSS <1%CVSS 4.0

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

Published 2026-02-25 · CVE record · OSV

Products: imagemagick

Fixed upstream

EcosystemPackageFixed in
NuGetMagick.NET-Q16-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-HDRI-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-x6414.10.3
NuGetMagick.NET-Q16-HDRI-x8614.10.3
NuGetMagick.NET-Q16-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-OpenMP-x8614.10.3
NuGetMagick.NET-Q16-arm6414.10.3
NuGetMagick.NET-Q16-x6414.10.3
NuGetMagick.NET-Q16-x8614.10.3
NuGetMagick.NET-Q8-AnyCPU14.10.3
NuGetMagick.NET-Q8-OpenMP-arm6414.10.3
NuGetMagick.NET-Q8-OpenMP-x6414.10.3
NuGetMagick.NET-Q8-arm6414.10.3
NuGetMagick.NET-Q8-x6414.10.3
NuGetMagick.NET-Q8-x8614.10.3

Distro releases

ReleasePackageFixed in
Amazon Linux 2ImageMagick6.9.10.97-1.amzn2.0.22
Amazon Linux 2ImageMagick-c++6.9.10.97-1.amzn2.0.22
Amazon Linux 2ImageMagick-c++-devel6.9.10.97-1.amzn2.0.22
Amazon Linux 2ImageMagick-devel6.9.10.97-1.amzn2.0.22
Amazon Linux 2ImageMagick-doc6.9.10.97-1.amzn2.0.22
Amazon Linux 2ImageMagick-perl6.9.10.97-1.amzn2.0.22
Amazon Linux 2023ImageMagick1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-c++1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-c++-devel1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-devel1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-doc1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-libs1:6.9.13.40-1.amzn2023.0.1
Amazon Linux 2023ImageMagick-perl1:6.9.13.40-1.amzn2023.0.1
Debian 11imagemagick8:6.9.11.60+dfsg-1.3+deb11u10
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u7
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u6
Debian 14imagemagick8:7.1.2.15+dfsg1-1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.37.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.37.1
SUSE Linux Enterprise Server 15 SP4-LTSSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server 15 SP5-LTSSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.42.2
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP4ImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP5ImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.0.9-150400.6.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.42.2
Ubuntu 25.10imagemagickno fix
Ubuntu Pro 14.04 LTSimagemagick8:6.7.7.10-6ubuntu3.13+esm22
Ubuntu Pro 16.04 LTSimagemagick8:6.8.9.9-7ubuntu5.16+esm21
Ubuntu Pro 18.04 LTSimagemagick8:6.9.7.4+dfsg-16ubuntu6.15+esm13
Ubuntu Pro 20.04 LTSimagemagick8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11
Ubuntu Pro 22.04 LTSimagemagick8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11
Ubuntu Pro 24.04 LTSimagemagick8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
openSUSE Leap 15.6ImageMagick7.1.1.21-150600.3.42.2
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.6.1
openSUSE TumbleweedImageMagick7.1.2.15-2.1