ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerability is fixed in 7.1.2-21 and 6.9.13-46.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6298 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6298-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 26, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : imagemagick     CVE ID         : CVE-2026-42050 CVE-2026-42326 CVE-2026-45031 CVE-2026-45358                      CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520                      CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46557                      CVE-2026-46559 CVE-2026-46692 CVE-2026-46693 CVE-2026-47165                      CVE-2026-47166

    Multiple security vulnerabilities were discovered in imagemagick,     a software suite used for editing and manipulating digital images, which     could lead to denial of service, information disclosure or potentially     arbitrary code execution if malformed images are processed.

    For the stable distribution (trixie), these problems have been fixed in     version 8:7.1.1.43+dfsg1-1+deb13u9.

    We recommend that you upgrade your imagemagick packages.

    For the detailed security status of imagemagick please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/imagemagick

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3305 advisory.

    Stack buffer overflow in XTileImage (CVE-2026-42050)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2020-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing     extremely       large images (bsc#1259528).
    - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2021-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing     extremely       large images (bsc#1259528).
    - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20786-1 advisory.

    This update for GraphicsMagick fixes the following issue

    - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2022-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing     extremely       large images (bsc#1259528).
    - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2023-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing     extremely       large images (bsc#1259528).
    - CVE-2026-42050: Stack buffer overflow in XTileImage (bsc#1265048).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1704 advisory.

    Stack buffer overflow in XTileImage (CVE-2026-42050)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a version of ImageMagick installed that is prior to 6.9.13-46 or 7.x prior to 7.1.2-21. It is, therefore, affected by a stack buffer overflow vulnerability:

  - A malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile     to invoke the Load / Update menu item. (CVE-2026-42050)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the     display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerability is fixed in     7.1.2-21 and 6.9.13-46. (CVE-2026-42050)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
316926	Debian dsa-6298 : imagemagick - security update	Nessus	Debian Local Security Checks	medium
316902	Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3305 (ALAS-2026-3305)	Nessus	Amazon Linux Local Security Checks	medium
316861	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:2020-1)	Nessus	SuSE Local Security Checks	medium
316859	SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2026:2021-1)	Nessus	SuSE Local Security Checks	medium
316858	openSUSE 16 Security Update : GraphicsMagick (openSUSE-SU-2026:20786-1)	Nessus	SuSE Local Security Checks	medium
316763	SUSE SLES15 Security Update : ImageMagick (SUSE-SU-2026:2022-1)	Nessus	SuSE Local Security Checks	medium
316723	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:2023-1)	Nessus	SuSE Local Security Checks	medium
315030	Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1704)	Nessus	Amazon Linux Local Security Checks	medium
314648	ImageMagick < 6.9.13-46 / 7.x < 7.1.2-21 Stack Buffer Overflow	Nessus	Misc.	medium
311723	Linux Distros Unpatched Vulnerability : CVE-2026-42050	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-42050

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium