RHSA-2026:32961 — Security Advisory

An update for ImageMagick is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Security Fix(es):

• ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images (CVE-2026-46520)

• ImageMagick: ImageMagick: Denial of Service via crafted MIFF file (CVE-2026-46522)

• ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder (CVE-2026-45664)

• ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder (CVE-2026-45031)

• ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free (CVE-2026-46523)

• ImageMagick: ImageMagick: Heap buffer over-write via magick -distribute-cache service connection (CVE-2026-46692)

• ImageMagick: ImageMagick: Denial of Service via missing memory request check (CVE-2026-53460)

• ImageMagick: ImageMagick: Denial of Service via crafted DCM image with invalid dimensions (CVE-2026-49218)

• ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection (CVE-2026-56379)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.