Imagemagick vulnerabilities

Products

• Imagemagick 902
• Graphicsmagick 2

Newest

• imagemagick ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder CVE-2026-123273 7.1 HighNovember 5, 2026
• imagemagick ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option CVE-2026-119124 Fix available 4.8 MediumOctober 29, 2026
• imagemagick ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder CVE-2026-119123 Fix available 6.3 MediumOctober 29, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate CVE-2026-116160 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option CVE-2026-116159 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Memory Leak in magick compare CVE-2026-116158 Fix available 2.0 LowOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading CVE-2026-116157 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option CVE-2026-116156 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile CVE-2026-116155 Fix available 6.9 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit CVE-2026-116154 Fix available 6.9 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit CVE-2026-116153 Fix available 2.0 LowOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path CVE-2026-116152 Fix available 6.9 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder CVE-2026-116151 Fix available 6.3 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder CVE-2026-116150 Fix available 2.3 LowOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images CVE-2026-116149 Fix available 7.2 HighOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options CVE-2026-116148 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder CVE-2026-116147 Fix available 6.3 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder CVE-2026-116146 Fix available 6.3 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix CVE-2026-116145 Fix available 1.8 LowOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder CVE-2026-116144 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders CVE-2026-116143 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box CVE-2026-116142 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder CVE-2026-116141 Fix available 6.9 MediumOctober 25, 2026
• imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing CVE-2026-116140 Fix available 4.8 MediumOctober 25, 2026
• imagemagick ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder CVE-2026-109964 Fix available 6.3 MediumOctober 13, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders CVE-2026-109282 Fix available 2.0 LowOctober 12, 2026
• imagemagick ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option CVE-2026-109281 Fix available 4.8 MediumOctober 12, 2026
• imagemagick ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option CVE-2026-109280 Fix available 2.0 LowOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access CVE-2026-109279 Fix available 2.0 LowOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation CVE-2026-109278 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 7.1.2-32 Policy Bypass via -script Operation CVE-2026-109277 Fix available 4.8 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder CVE-2026-109276 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder CVE-2026-109275 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script CVE-2026-109274 Fix available 2.0 LowOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder CVE-2026-109273 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder CVE-2026-109272 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder CVE-2026-109271 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 7.1.2-32 Memory Leak via -process Option CVE-2026-109270 Fix available 4.8 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder CVE-2026-109269 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000 CVE-2026-109268 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder CVE-2026-109267 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder CVE-2026-109266 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile CVE-2026-109265 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder CVE-2026-109264 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder CVE-2026-109263 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder CVE-2026-109262 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder CVE-2026-109261 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder CVE-2026-109260 Fix available 6.3 MediumOctober 12, 2026
• imagemagick ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder CVE-2026-109259 Fix available 6.9 MediumOctober 12, 2026
• imagemagick ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation CVE-2026-109258 Fix available 2.0 LowOctober 12, 2026
• Show olderLoading…