RHSA-2026:3058HighCVSS 8.1

Red Hat Security Advisory: ImageMagick security update

Published
February 23, 2026
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2025-62171 →CVE-2026-23876 →

📋 Description

CVE-2025-62171 — ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems CVE-2026-23876 — ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file

🎯 Affected products53

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-0:6.9.10.68-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-0:6.9.10.68-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-c++-devel-0:6.9.10.68-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • ImageMagick-debuginfo-0:6.9.10.68-10.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • +23 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, ensure that ImageMagick is configured with its default resource limits for image width, height, and area. Avoid manually increasing these limits beyond their defaults, especially on 32-bit systems. If 32-bit ImageMagick is not a requirement, deploying 64-bit versions of ImageMagick will prevent this vulnerability. Workaround: To reduce the risk associated with this vulnerability, avoid processing untrusted XBM image files with ImageMagick. Implement strict input validation and sanitization for any image files processed by ImageMagick, especially those originating from external or untrusted sources. Deploying ImageMagick within a sandboxed or containerized environment can further limit the impact of a successful exploit by isolating the process and restricting its access to system resources.

🔗 References (5)