Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-55577

Fixed in a distro release EPSS <1%CVSS 5.9

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

Published 2026-07-01 · CVE record · OSV

Products: imagemagick

Distro releases

ReleasePackageFixed in
Amazon Linux 2ImageMagick6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-doc6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-perl6.9.10.97-1.amzn2.0.32
Amazon Linux 2023ImageMagick1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-doc1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-libs1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-perl1:6.9.13.54-1.amzn2023
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u12
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u11
Debian 14imagemagick8:7.1.2.26+dfsg1-1
Ubuntu 25.10imagemagickno fix
Ubuntu 26.10imagemagickno fix
Ubuntu Pro 14.04 LTSimagemagickno fix
Ubuntu Pro 16.04 LTSimagemagickno fix
Ubuntu Pro 18.04 LTSimagemagickno fix
Ubuntu Pro 20.04 LTSimagemagickno fix
Ubuntu Pro 22.04 LTSimagemagickno fix
Ubuntu Pro 24.04 LTSimagemagickno fix
Ubuntu Pro 26.04 LTSimagemagickno fix
openSUSE TumbleweedImageMagick7.1.2.27-1.1