Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-33901

Fixed in a distro release EPSS <1%CVSS 7.5

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

Published 2026-04-13 · CVE record · OSV

Products: imagemagick, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

Fixed upstream

EcosystemPackageFixed in
NuGetMagick.NET-Q16-AnyCPU14.12.0
NuGetMagick.NET-Q16-HDRI-AnyCPU14.12.0
NuGetMagick.NET-Q16-HDRI-OpenMP-arm6414.12.0
NuGetMagick.NET-Q16-HDRI-arm6414.12.0
NuGetMagick.NET-Q16-HDRI-x6414.12.0
NuGetMagick.NET-Q16-HDRI-x8614.12.0
NuGetMagick.NET-Q16-OpenMP-arm6414.12.0
NuGetMagick.NET-Q16-OpenMP-x6414.12.0
NuGetMagick.NET-Q16-arm6414.12.0
NuGetMagick.NET-Q16-x6414.12.0
NuGetMagick.NET-Q16-x8614.12.0
NuGetMagick.NET-Q8-AnyCPU14.12.0
NuGetMagick.NET-Q8-OpenMP-arm6414.12.0
NuGetMagick.NET-Q8-OpenMP-x6414.12.0
NuGetMagick.NET-Q8-arm6414.12.0
NuGetMagick.NET-Q8-x6414.12.0
NuGetMagick.NET-Q8-x8614.12.0

Distro releases

ReleasePackageFixed in
Amazon Linux 2ImageMagick6.9.10.97-1.amzn2.0.27
Amazon Linux 2ImageMagick-c++6.9.10.97-1.amzn2.0.27
Amazon Linux 2ImageMagick-c++-devel6.9.10.97-1.amzn2.0.27
Amazon Linux 2ImageMagick-devel6.9.10.97-1.amzn2.0.27
Amazon Linux 2ImageMagick-doc6.9.10.97-1.amzn2.0.27
Amazon Linux 2ImageMagick-perl6.9.10.97-1.amzn2.0.27
Amazon Linux 2023ImageMagick1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-c++1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-c++-devel1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-devel1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-doc1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-libs1:6.9.13.44-1.amzn2023.0.2
Amazon Linux 2023ImageMagick-perl1:6.9.13.44-1.amzn2023.0.2
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u9
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u8
Debian 14imagemagick8:7.1.2.19+dfsg1-1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.47.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.47.1
SUSE Linux Enterprise Server 15 SP4-LTSSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Server 15 SP5-LTSSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.55.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ImageMagick7.1.0.9-150400.6.87.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.55.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.0.9-150400.6.87.1
Ubuntu 25.10imagemagickno fix
Ubuntu 26.10imagemagickno fix
Ubuntu Pro 14.04 LTSimagemagickno fix
Ubuntu Pro 16.04 LTSimagemagickno fix
Ubuntu Pro 18.04 LTSimagemagickno fix
Ubuntu Pro 20.04 LTSimagemagickno fix
Ubuntu Pro 22.04 LTSimagemagickno fix
Ubuntu Pro 24.04 LTSimagemagickno fix
Ubuntu Pro 26.04 LTSimagemagickno fix
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.8.1
openSUSE TumbleweedImageMagick7.1.2.19-2.1