Changeflow GovPing Data Privacy & Cybersecurity ImageMagick Vulnerability Allows Remote Denial ...
Priority review Notice Added Final

ImageMagick Vulnerability Allows Remote Denial of Service

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published March 16th, 2026
Detected March 17th, 2026
Email

Summary

CERT-Bund has issued a security advisory for ImageMagick, detailing a vulnerability that allows remote denial of service attacks. The advisory affects versions prior to Open Source ImageMagick <7.1.2-17 and <6.9.13-42, impacting Linux, UNIX, and Windows systems.

View original document View source feed page

What changed

CERT-Bund has released security advisory WID-SEC-2026-0744 concerning a critical vulnerability in ImageMagick. This vulnerability, with a CVSS Base Score of 5.3, allows remote, anonymous attackers to execute a denial of service (DoS) attack. The advisory specifically impacts Open Source ImageMagick versions prior to 7.1.2-17 and 6.9.13-42, affecting Linux, UNIX, and Windows operating systems.

Organizations utilizing affected versions of ImageMagick should immediately update to a patched version or implement available mitigations to prevent potential DoS attacks. Failure to address this vulnerability could lead to service disruptions and impact the availability of systems processing graphics. While no specific compliance deadline is mentioned, prompt action is recommended to secure systems.

What to do next

  1. Update ImageMagick to a version later than 7.1.2-17 or 6.9.13-42
  2. Implement available mitigations for ImageMagick DoS vulnerability

Source document (simplified)

[WID-SEC-2026-0744] ImageMagick: Schwachstelle ermöglicht Denial of Service CVSS Base Score 5.3 (mittel) CVSS Temporal Score 4.6 (mittel) Remoteangriff ja Datum 16.03.2026 Stand 17.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux
  • Sonstiges
  • UNIX
  • Windows

Produktbeschreibung

ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.

Produkte

16.03.2026
- Open Source ImageMagick <7.1.2-17

  • Open Source ImageMagick <6.9.13-42

Angriff

Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de Langflow Vulnerabilities Allow Code Execution and Security Bypass
Urgent Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de OpenCTI Vulnerability Allows Bypassing Security Measures
Priority review Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Vercel Next.js Vulnerabilities Allow DoS or Security Bypass
Priority review Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for news.dli.mt.gov Montana DLI Warns About Phishing Scam
Priority review Mar 17, 2026 • news.dli.mt.gov • Labor & Employment
Favicon for www.maine.gov Maine Revenue Services Warns of W-2 Phishing Scams
Priority review Mar 17, 2026 • revenue • Tax
Favicon for www.cert.ssi.gouv.fr CERT-FR: Multiple vulnerabilities in Mattermost Server
Priority review Mar 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-Bund
Published
March 16th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Manufacturers Technology companies
Geographic scope
de

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software Vulnerabilities Denial of Service

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 163 Consumer Protection 29 Courts & Legal 206 Data Privacy & Cybersecurity 58 Defense & National Security 48 Education 20 Energy 93 Environment 81 Government & Legislation 240 Healthcare 104 Housing 15 Immigration 8 Insurance 16 Labor & Employment 104 Pharma & Drug Safety 68 Securities & Markets 69 Tax 48 Telecom & Technology 34 Trade & Sanctions 113 Transportation 53

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.