Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1826)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1826 advisory. When writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. as per:...

CVE-2026-42326

A flaw was found in ImageMagick, a software used for editing and manipulating digital images. A local attacker could exploit this vulnerability by providing a malicious input file. When ImageMagick attempts to write an IPTC output file, this malicious input could cause the software to read beyond...

CVE-2026-42326

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...

CVE-2026-42326

ImageMagick contains CVE-2026-42326: a heap buffer over-read in the IPTC encoder when handling input during IPTC output file writing. Affected are ImageMagick versions prior to 6.9.13-47 and 7.1.2-22. The issue has been patched in 6.9.13-47 and 7.1.2-22. Upgrade to those versions (or newer) to re...

ImageMagick < 6.9.13-47 / 7.x < 7.1.2-22 Multiple Vulnerabilities

The remote host has a version of ImageMagick installed that is prior to 6.9.13-47 or 7.x prior to 7.1.2-22. It is, therefore, affected by multiple vulnerabilities: - When writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. CVE-2026-42326 - An of ...