Skip to contentImagemagick vulnerabilities
Newest
- imagemagickImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`CVE-2026-26283Fix available6.2 Medium
- imagemagickImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profileCVE-2026-26066Fix available6.2 Medium
- imagemagickImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoderCVE-2026-25989Fix available7.5 High
- imagemagickImageMagick's MSL image stack index not refreshed, leading to leaked images.CVE-2026-25988Fix available5.3 Medium
- imagemagickImageMagick has heap buffer over-read in MAP image decoderCVE-2026-25987Fix available5.3 Medium
- imagemagickImageMagick has a heap buffer overflow in YUV 4:2:2 decoderCVE-2026-25986Fix available5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreMemory allocation with excessive without limits in the internal SVG decoderCVE-2026-25985Fix available7.5 High
- imagemagickImageMagick has Use After Free in MSLStartElement in "coders/msl.c"CVE-2026-25983Fix available5.3 Medium
- imagemagickImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)CVE-2026-25982Fix available6.5 Medium
- imagemagickImageMagick's MSL: Stack overflow in ProcessMSLScriptCVE-2026-25971Fix available6.2 Medium
- imagemagickImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory CorruptionCVE-2026-25970Fix available5.3 Medium
- imagemagickImageMagick has Memory Leak in coders/ashlar.cCVE-2026-25969Fix available5.3 Medium
- imagemagickImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.CVE-2026-25968Fix available7.4 High
- imagemagickImageMagick has stack buffer overflow in FTXT reader via oversized integer fieldCVE-2026-25967Fix available7.4 High
- imagemagickImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout accessCVE-2026-25966Fix available5.9 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick's policy bypass through path traversal allows reading restricted content despite secured policyCVE-2026-25965Fix available8.6 High
- imagemagickImagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM WriterCVE-2026-25898Fix available6.5 Medium
- imagemagickImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds writeCVE-2026-25897Fix available6.5 Medium
- imagemagickImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crashCVE-2026-25799Fix available5.3 Medium
- imagemagickImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted imageCVE-2026-25798Fix available5.3 Medium
- imagemagickImageMagick vulnerable to Code injection via PostScript header in ps codersCVE-2026-25797Fix available5.7 Medium
- imagemagickImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return pathsCVE-2026-25796Fix available5.3 Medium
- imagemagickImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)CVE-2026-25795Fix available5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensionsCVE-2026-25794Fix available8.2 High
- imagemagickImageMagick has memory leak in msl encoderCVE-2026-25638Fix available5.3 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Possible memory leak in ASHLAR encoderCVE-2026-25637Fix available5.3 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Out of bounds read in multiple coders read raw pixel dataCVE-2026-25576Fix available5.1 Medium
- imagemagick, dlemstra magick.net +1 moreImageMagick: Infinite loop vulnerability when parsing a PCD fileCVE-2026-24485Fix available7.5 High
- imagemagick, dlemstra magick.net +1 moreImageMagick: Converting multi-layer nested MVG to SVG can cause DoSCVE-2026-24484Fix available5.3 Medium
- imagemagickImageMagick has Possible Heap Information Disclosure in PSD ZIP DecompressionCVE-2026-24481Fix available7.5 High
- imagemagick, dlemstra magick.net +1 moreImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image loadCVE-2026-23952Fix available6.5 Medium
- imagemagickImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XMLCVE-2026-56364Fix available1.8 Low
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreHeap buffer overflow with attacker-controlled data in XBM parserCVE-2026-23876Fix available8.1 High
- imagemagickImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScriptCVE-2026-23874Fix available5.5 Medium
- imagemagickImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation failsCVE-2026-22770Fix available6.5 Medium
- imagemagickImageMagick converting a malicious MVG file to SVG caused an integer overflow.CVE-2025-69204Fix available5.3 Medium
- imagemagickMagick's failure to limit MVG mutual references forming a loopCVE-2025-68950Fix available4.0 Medium
- imagemagickMagick's failure to limit the depth of SVG file reads caused a DoS attack.CVE-2025-68618Fix available5.3 Medium
- imagemagickImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only)CVE-2025-66628Public exploitFix available7.5 High
- imagemagickImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing familyCVE-2025-65955Fix available4.9 Medium
- imagemagickImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)CVE-2025-62594Fix available4.7 Medium
- imagemagickImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systemsCVE-2025-62171Fix available5.9 Medium
- imagemagickImageMagick BlobStream Forward-Seek Under-AllocationCVE-2025-57807Fix available3.8 Low
- imagemagickImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflowCVE-2025-57803Fix available7.5 High
- imagemagickImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code executionCVE-2025-55298Fix available7.5 High
- imagemagickImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crashCVE-2025-55212Fix available3.7 Low
- imagemagickImageMagick vulnerable to heap-buffer-overflowCVE-2025-68469Fix available2.0 Low
- imagemagickImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTreeCVE-2025-55160Fix available6.1 Medium
- imagemagickImageMagick: integer overflows in MNG magnificationCVE-2025-55154Fix available8.8 High
- imagemagickImageMagick: heap-buffer overflow in log colorspace handlingCVE-2025-55005Fix available5.5 Medium
- Show moreLoading…