Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-61464

Fixed in a distro release EPSS <1%CVSS 1.8

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

Published 2026-07-15 · CVE record · OSV

Products: imagemagick

Fixed upstream

EcosystemPackageFixed in
NuGetMagick.NET-Q16-AnyCPU14.15.0
NuGetMagick.NET-Q16-HDRI-AnyCPU14.15.0
NuGetMagick.NET-Q16-HDRI-OpenMP-arm6414.15.0
NuGetMagick.NET-Q16-HDRI-arm6414.15.0
NuGetMagick.NET-Q16-HDRI-x6414.15.0
NuGetMagick.NET-Q16-HDRI-x8614.15.0
NuGetMagick.NET-Q16-OpenMP-arm6414.15.0
NuGetMagick.NET-Q16-OpenMP-x6414.15.0
NuGetMagick.NET-Q16-arm6414.15.0
NuGetMagick.NET-Q16-x6414.15.0
NuGetMagick.NET-Q16-x8614.15.0
NuGetMagick.NET-Q8-AnyCPU14.15.0
NuGetMagick.NET-Q8-OpenMP-arm6414.15.0
NuGetMagick.NET-Q8-OpenMP-x6414.15.0
NuGetMagick.NET-Q8-arm6414.15.0
NuGetMagick.NET-Q8-x6414.15.0
NuGetMagick.NET-Q8-x8614.15.0

Distro releases

ReleasePackageFixed in
Amazon Linux 2ImageMagick6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-doc6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-perl6.9.10.97-1.amzn2.0.32
Amazon Linux 2023ImageMagick1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-doc1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-libs1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-perl1:6.9.13.54-1.amzn2023
Debian 12graphicsmagickno fix
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u13
Debian 13graphicsmagickno fix
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u12
Debian 14graphicsmagick1.4+really1.3.49-1
Debian 14imagemagick8:7.1.2.26+dfsg1-1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.70.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.101.1
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.70.1
SUSE Linux Enterprise Module for Package Hub 15 SP7GraphicsMagick1.3.42-150600.3.39.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server 16.0ImageMagick7.1.2.0-160000.13.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ImageMagick6.8.8.1-71.264.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server for SAP applications 16.0ImageMagick7.1.2.0-160000.13.1
Ubuntu 26.10imagemagickno fix
Ubuntu Pro 14.04 LTSimagemagickno fix
Ubuntu Pro 16.04 LTSimagemagickno fix
Ubuntu Pro 18.04 LTSimagemagickno fix
Ubuntu Pro 20.04 LTSimagemagickno fix
Ubuntu Pro 22.04 LTSimagemagickno fix
Ubuntu Pro 24.04 LTSimagemagickno fix
Ubuntu Pro 26.04 LTSimagemagickno fix
openSUSE Leap 16.0GraphicsMagick1.3.45-160000.11.1
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.13.1
openSUSE TumbleweedGraphicsMagick1.3.48-1.1
openSUSE TumbleweedImageMagick7.1.2.27-3.1