Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

Magick.NET-Q16-HDRI-OpenMP-x64

94 known vulnerabilities (1 critical, 19 high, 66 medium, 7 low), with the versions each affects and the releases that fix them.

Latest release
15.1.0 (Nov 5, 2026): no advisory affects it
Newest unaffected release
15.1.0 (Nov 5, 2026), the latest release
Advisories
94 · 1 critical, 19 high, 66 medium, 7 low
Releases
121 since 7.14.0 (Jun 16, 2019)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

Show all 94 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 94

  • CVE-2026-56372Medium 4.8

    ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method

    Affected: fixed in 14.12.0.

    Fixed in 14.12.0 (released Apr 13, 2026, 89 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56373Medium 6.3

    ImageMagick - Use-After-Free Write in PDB Decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 137 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56374Medium 4.8

    ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter

    Affected: fixed in 14.12.0.

    Fixed in 14.12.0 (released Apr 13, 2026, 86 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 135 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56365Medium 6.3

    ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing

    Affected: fixed in 14.12.0.

    Fixed in 14.12.0 (released Apr 13, 2026, 78 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML

    Affected: fixed in 14.10.2.

    Fixed in 14.10.2 (released Jan 19, 2026, 162 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56361Medium 4.8

    ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing

    Affected: fixed in 14.12.0.

    Fixed in 14.12.0 (released Apr 13, 2026, 78 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56370Medium 4.8

    ImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact

    Affected: fixed in 14.12.0.

    Fixed in 14.12.0 (released Apr 13, 2026, 72 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56368Medium 6.3

    ImageMagick - Memory Leak in Raw Pixel Data Coders

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 121 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56379Critical 9.2

    ImageMagick - Command Injection via SVG Decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 120 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56376Medium 6.3

    ImageMagick - Heap Use-After-Free in Meta Coder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 120 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56371Medium 6.9

    ImageMagick - Memory Leak in TXT File Processing via Texture Attribute

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 120 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56378Medium 6.3

    ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 118 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-56367Medium 6.3

    ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 118 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-46559Medium 4.0

    ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

Show all 94 advisoriesShow fewer advisories
  • CVE-2026-46557Medium 6.2

    ImageMagick: Stack overflow in fx operation

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-46521Medium 5.5

    ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-45664Medium 5.3

    ImageMagick: Policy Bypass in MNG coder could

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-45624Medium 5.1

    ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-45359Medium 5.7

    ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-45358Medium 5.3

    ImageMagick: Out-of-Bounds Read of a single byte in meta encoder

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-42326Medium 5.1

    ImageMagick: Heap Buffer Over-Read in IPTC encoder

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-45031Medium 5.3

    ImageMagick: Policy Bypass in PSD decoder

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-46523Medium 6.2

    ImageMagick: Use-After-Free in MSL decoder.

    Affected: fixed in 14.13.1.

    Fixed in 14.13.1 (released May 17, 2026, 24 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-32636Medium 5.3

    ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

    Affected: fixed in 14.11.0.

    Fixed in 14.11.0 (released Mar 16, 2026, 2 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-31853Medium 5.7

    ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, 2 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-30937Medium 6.8

    ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-30936Medium 5.5

    ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-30935Medium 4.4

    ImageMagick has a heap Buffer Over-Read in BilateralBlurImage

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-30931Medium 6.8

    ImageMagick has a heap-based buffer overflow in UHDR encoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has a stack buffer overflow in MagnifyImage

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-30883Medium 5.7

    ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28692Medium 4.8

    ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has an uninitialized pointer dereference in JBIG decoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28690Medium 6.9

    ImageMagick has a stack write buffer overflow in MNG encoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28689Medium 6.3

    ImageMagick has a Path Policy TOCTOU symlink race bypass

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28688Medium 4.0

    ImageMagick has a heap use-after-free in the MSL encoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28687Medium 5.3

    ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28686Medium 6.8

    ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick affected by stack corruption through long morphology kernel names or arrays

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-28493Medium 6.5

    ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder

    Affected: fixed in 14.10.4.

    Fixed in 14.10.4 (released Mar 9, 2026, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-27799Medium 4.0

    ImageMagick has a heap Buffer Over-read in its DJVU image format handler

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 2 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-27798Medium 4.0

    ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 2 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-26983Medium 5.3

    ImageMagick: Invalid MSL <map> can result in a use after free

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-26284Medium 6.5

    ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-26283Medium 6.2

    ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-26066Medium 6.2

    ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25988Medium 5.3

    ImageMagick's MSL image stack index not refreshed, leading to leaked images.

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25987Medium 5.3

    ImageMagick has heap buffer over-read in MAP image decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25986Medium 5.3

    ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • Memory allocation with excessive without limits in the internal SVG decoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25983Medium 5.3

    ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25982Medium 6.5

    ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25971Medium 6.2

    ImageMagick's MSL: Stack overflow in ProcessMSLScript

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25970Medium 5.3

    ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25969Medium 5.3

    ImageMagick has Memory Leak in coders/ashlar.c

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has stack buffer overflow in FTXT reader via oversized integer field

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25898Medium 6.5

    Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25897Medium 6.5

    ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25799Medium 5.3

    ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25798Medium 5.3

    ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25797Medium 5.7

    ImageMagick vulnerable to Code injection via PostScript header in ps coders

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25796Medium 5.3

    ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25795Medium 5.3

    ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25638Medium 5.3

    ImageMagick has memory leak in msl encoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-25637Medium 5.3

    ImageMagick: Possible memory leak in ASHLAR encoder

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick: Infinite loop vulnerability when parsing a PCD file

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-24484Medium 5.3

    ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

    Affected: fixed in 14.10.3.

    Fixed in 14.10.3 (released Feb 23, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-23952Medium 6.5

    ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

    Affected: fixed in 14.10.2.

    Fixed in 14.10.2 (released Jan 19, 2026, 3 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-23874Medium 5.5

    ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript

    Affected: fixed in 14.10.2.

    Fixed in 14.10.2 (released Jan 19, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2026-22770Medium 6.5

    ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

    Affected: fixed in 14.10.2.

    Fixed in 14.10.2 (released Jan 19, 2026, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2025-68950Medium 4.0

    Magick's failure to limit MVG mutual references forming a loop

    Affected: fixed in 14.10.1.

    Fixed in 14.10.1 (released Dec 30, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2025-68618Medium 5.3

    Magick's failure to limit the depth of SVG file reads caused a DoS attack.

    Affected: fixed in 14.10.1.

    Fixed in 14.10.1 (released Dec 30, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick vulnerable to heap-buffer-overflow

    Affected: fixed in 13.2.0.

    Fixed in 13.2.0 (released Jul 24, 2023, 878 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2025-62594Medium 4.7

    ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

    Affected: through 14.9.0.

    Fixed in 14.9.1 (released Oct 29, 2025, 2 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 15.1.0, is not affected.

  • ImageMagick BlobStream Forward-Seek Under-Allocation

    Affected: fixed in 14.8.2.

    Fixed in 14.8.2 (released Sep 1, 2025, 4 days before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

    Affected: fixed in 14.8.1.

    Fixed in 14.8.1 (released Aug 26, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

    Affected: fixed in 14.8.1.

    Fixed in 14.8.1 (released Aug 26, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • CVE-2025-55160Medium 6.1

    ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

    Affected: fixed in 14.8.0.

    Fixed in 14.8.0 (released Aug 13, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick: integer overflows in MNG magnification

    Affected: fixed in 14.8.0.

    Fixed in 14.8.0 (released Aug 13, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick: heap-buffer overflow read in MNG magnification with alpha

    Affected: fixed in 14.8.0.

    Fixed in 14.8.0 (released Aug 13, 2025, the day of disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has Stack Buffer Overflow in image.c

    Affected: fixed in 14.7.0.

    Fixed in 14.7.0 (released Jul 13, 2025, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has Memory Leak in magick stream

    Affected: fixed in 14.7.0.

    Fixed in 14.7.0 (released Jul 13, 2025, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has XMP profile write that triggers hang due to unbounded loop

    Affected: fixed in 14.7.0.

    Fixed in 14.7.0 (released Jul 13, 2025, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • ImageMagick has Heap Buffer Overflow in InterpretImageFilename

    Affected: fixed in 14.7.0.

    Fixed in 14.7.0 (released Jul 13, 2025, 1 day before disclosure).

    The latest release, 15.1.0, is not affected.

  • A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault.

    Affected: fixed in 13.0.0.

    Fixed in 13.0.0 (released Mar 13, 2023, 10 days before disclosure).

    The latest release, 15.1.0, is not affected.