ImageMagick Fails to Validate SVG Conversions, Crashing Server

Summary

ImageMagick, a popular image editing software, fails to properly handle certain SVG conversions, which could cause a denial-of-service (crash) on affected servers. This issue affects older versions of ImageMagick, but newer versions have a fix. Update to the latest version to prevent potential crashes.

What to do

Update debian imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u6.
Update debian imagemagick to version 8:7.1.2.15+dfsg1-1.

Affected software

Vendor	Product	Affected versions	Fix available
debian	imagemagick	All versions	–
debian	imagemagick	All versions	–
debian	imagemagick	<= 8:7.1.1.43+dfsg1-1+deb13u6	8:7.1.1.43+dfsg1-1+deb13u6
debian	imagemagick	<= 8:7.1.2.15+dfsg1-1	8:7.1.2.15+dfsg1-1

Original title

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions...

Original description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

osv CVSS3.1 5.3

https://security-tracker.debian.org/tracker/CVE-2026-24484 Vendor Advisory