Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-56379

Fixed in a distro release EPSS 2%CVSS 8.1

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

Published 2026-06-23 · CVE record · OSV

Products: imagemagick, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 6

Fixed upstream

EcosystemPackageFixed in
NuGetMagick.NET-Q16-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-HDRI-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-x6414.10.3
NuGetMagick.NET-Q16-HDRI-x8614.10.3
NuGetMagick.NET-Q16-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-OpenMP-x8614.10.3
NuGetMagick.NET-Q16-arm6414.10.3
NuGetMagick.NET-Q16-x6414.10.3
NuGetMagick.NET-Q16-x8614.10.3
NuGetMagick.NET-Q8-AnyCPU14.10.3
NuGetMagick.NET-Q8-OpenMP-arm6414.10.3
NuGetMagick.NET-Q8-OpenMP-x6414.10.3
NuGetMagick.NET-Q8-arm6414.10.3
NuGetMagick.NET-Q8-x6414.10.3
NuGetMagick.NET-Q8-x8614.10.3

Distro releases

ReleasePackageFixed in
Debian 12graphicsmagickno fix
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u8
Debian 13graphicsmagickno fix
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u8
Debian 14graphicsmagick1.4+really1.3.49-1
Debian 14imagemagick8:7.1.2.15+dfsg1-1
Red Hat rhel els 7ImageMagick0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-c++0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-c++-devel0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-debuginfo0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-devel0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-doc0:6.9.10.68-17.el7_9
Red Hat rhel els 7ImageMagick-perl0:6.9.10.68-17.el7_9
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.65.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.73.1
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.65.1
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.73.1
SUSE Linux Enterprise Module for Package Hub 15 SP7GraphicsMagick1.3.42-150600.3.42.1
SUSE Linux Enterprise Server 12 SP5-LTSSImageMagick6.8.8.1-71.259.1
SUSE Linux Enterprise Server 12 SP5-LTSSImageMagick6.8.8.1-71.267.1
SUSE Linux Enterprise Server 15 SP4-LTSSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server 15 SP4-LTSSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server 15 SP5-LTSSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server 15 SP5-LTSSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.73.1
SUSE Linux Enterprise Server 16.0ImageMagick7.1.2.0-160000.13.1
SUSE Linux Enterprise Server 16.0ImageMagick7.1.2.0-160000.11.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ImageMagick6.8.8.1-71.259.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ImageMagick6.8.8.1-71.267.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.0.9-150400.6.96.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.73.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.0.9-150400.6.104.1
SUSE Linux Enterprise Server for SAP applications 16.0ImageMagick7.1.2.0-160000.13.1
SUSE Linux Enterprise Server for SAP applications 16.0ImageMagick7.1.2.0-160000.11.1
Ubuntu 25.10imagemagickno fix
Ubuntu Pro 14.04 LTSimagemagick8:6.7.7.10-6ubuntu3.13+esm25
Ubuntu Pro 16.04 LTSimagemagick8:6.8.9.9-7ubuntu5.16+esm24
Ubuntu Pro 18.04 LTSimagemagick8:6.9.7.4+dfsg-16ubuntu6.15+esm16
Ubuntu Pro 20.04 LTSimagemagick8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14
Ubuntu Pro 22.04 LTSimagemagick8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14
Ubuntu Pro 24.04 LTSimagemagick8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13
Ubuntu Pro 26.04 LTSimagemagick8:7.1.2.18+dfsg1-1ubuntu0.1~esm2
openSUSE Leap 16.0GraphicsMagick1.3.45-160000.12.1
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.11.1
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.13.1
openSUSE TumbleweedGraphicsMagick1.3.48-1.1
openSUSE TumbleweedImageMagick7.1.2.25-3.1