Red Hat Security Advisory: ImageMagick security update
Two security vulnerabilities have been identified in ImageMagick as used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The first is a denial of service vulnerability caused by an integer overflow in the BMP decoder on 32-bit systems (CVE-2025-62171). The second is an arbitrary code execution vulnerability triggered by a crafted XBM image file (CVE-2026-23876). Red Hat has issued an important security update to address these issues. The update is available for multiple architectures under the Extended Lifecycle Support for Red Hat Enterprise Linux 7. No CVSS scores are provided in the advisory, but the severity is rated as important by Red Hat.
AI Analysis
Technical Summary
ImageMagick, a tool for image display and manipulation on the X Window System, has two vulnerabilities affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support. CVE-2025-62171 is a denial of service vulnerability due to an integer overflow in the BMP decoder on 32-bit systems. CVE-2026-23876 allows arbitrary code execution via a crafted XBM image file. Red Hat Product Security has released updated packages to fix these vulnerabilities. The advisory references Red Hat Bugzilla entries BZ-2404735 and BZ-2431038 for the respective CVEs. The update is classified as important and applies to multiple architectures including x86_64, s390x, ppc64, and ppc64le. Detailed patch instructions are available from Red Hat's official update article.
Potential Impact
Successful exploitation of CVE-2025-62171 can cause denial of service on affected 32-bit systems running ImageMagick by triggering an integer overflow in the BMP decoder. CVE-2026-23876 allows an attacker to execute arbitrary code by processing a specially crafted XBM image file, which could lead to full system compromise. These vulnerabilities impact systems running Red Hat Enterprise Linux 7 Extended Lifecycle Support with ImageMagick installed. The severity is rated as important by Red Hat, indicating significant risk if unpatched.
Mitigation Recommendations
Red Hat has released updated ImageMagick packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2026:3058 and the related article at https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional mitigation steps are specified or required beyond installing the provided updates.
Red Hat Security Advisory: ImageMagick security update
Description
Two security vulnerabilities have been identified in ImageMagick as used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The first is a denial of service vulnerability caused by an integer overflow in the BMP decoder on 32-bit systems (CVE-2025-62171). The second is an arbitrary code execution vulnerability triggered by a crafted XBM image file (CVE-2026-23876). Red Hat has issued an important security update to address these issues. The update is available for multiple architectures under the Extended Lifecycle Support for Red Hat Enterprise Linux 7. No CVSS scores are provided in the advisory, but the severity is rated as important by Red Hat.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
ImageMagick, a tool for image display and manipulation on the X Window System, has two vulnerabilities affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support. CVE-2025-62171 is a denial of service vulnerability due to an integer overflow in the BMP decoder on 32-bit systems. CVE-2026-23876 allows arbitrary code execution via a crafted XBM image file. Red Hat Product Security has released updated packages to fix these vulnerabilities. The advisory references Red Hat Bugzilla entries BZ-2404735 and BZ-2431038 for the respective CVEs. The update is classified as important and applies to multiple architectures including x86_64, s390x, ppc64, and ppc64le. Detailed patch instructions are available from Red Hat's official update article.
Potential Impact
Successful exploitation of CVE-2025-62171 can cause denial of service on affected 32-bit systems running ImageMagick by triggering an integer overflow in the BMP decoder. CVE-2026-23876 allows an attacker to execute arbitrary code by processing a specially crafted XBM image file, which could lead to full system compromise. These vulnerabilities impact systems running Red Hat Enterprise Linux 7 Extended Lifecycle Support with ImageMagick installed. The severity is rated as important by Red Hat, indicating significant risk if unpatched.
Mitigation Recommendations
Red Hat has released updated ImageMagick packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2026:3058 and the related article at https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional mitigation steps are specified or required beyond installing the provided updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:3058
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-23876"]
Threat ID: 6a3da1c44853345fc181f8e6
Added to database: 06/25/2026, 21:46:44 UTC
Last enriched: 08/07/2026, 02:27:49 UTC
Last updated: 09/14/2026, 22:01:30 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.