CVE-2026-49219
EUVD-2026-3618510.06.2026, 23:16
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| imagemagick | imagemagick | 𝑥 < 6.9.13-48 |
| imagemagick | imagemagick | 7.0.0-0 ≤ 𝑥 < 7.1.2-24 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| imagemagick |
|
Ubuntu Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| ImageMagick |
| ||
| ImageMagick-c++ |
| ||
| ImageMagick-c++-debuginfo |
| ||
| ImageMagick-c++-devel |
| ||
| ImageMagick-debuginfo |
| ||
| ImageMagick-debugsource |
| ||
| ImageMagick-devel |
| ||
| ImageMagick-doc |
| ||
| ImageMagick-libs |
| ||
| ImageMagick-libs-debuginfo |
| ||
| ImageMagick-perl |
| ||
| ImageMagick-perl-debuginfo |
|
Vulnerability Media Exposure