Medium severity5.9NVD Advisory· Published Jun 10, 2026· Updated Jun 11, 2026
CVE-2026-48994
CVE-2026-48994
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check of a return value could lead to a heap buffer over-write in the MAT decoder on 32-bit systems. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13- Range: <6.9.13-48, <7.1.2-24
- osv-coords12 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweedpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6
< 7.1.2.25-2.1+ 11 more
- (no CPE)range: < 7.1.2.25-2.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
Patches
Vulnerability mechanics
References
1News mentions
1- ImageMagick: 25 Vulnerabilities Disclosed in Single Batch on June 10, 2026Vypr Intelligence · Jun 10, 2026