- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 68 · 1 critical, 12 high, 52 medium, 2 low
- Registry
- NuGet
Advisories 68
- CVE-2026-56375Medium 4.8
ImageMagick - Memory Leak in ASHLAR Coder Action Failure
Affected: fixed in 14.11.1.
- CVE-2026-56373Medium 6.3
ImageMagick - Use-After-Free Write in PDB Decoder
Affected: fixed in 14.10.3.
- CVE-2026-56366Medium 4.8
ImageMagick - Memory Leak in META Reader APP1JPEG Error Path
Affected: fixed in 14.11.1.
- CVE-2026-56362Low 2.1
ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization
Affected: fixed in 14.10.3.
- CVE-2026-56364Low 1.8
ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML
Affected: fixed in 14.10.2.
- CVE-2026-56368Medium 6.3
ImageMagick - Memory Leak in Raw Pixel Data Coders
Affected: fixed in 14.10.3.
- CVE-2026-56379Critical 9.2
ImageMagick - Command Injection via SVG Decoder
Affected: fixed in 14.10.3.
- CVE-2026-56376Medium 6.3
ImageMagick - Heap Use-After-Free in Meta Coder
Affected: fixed in 14.10.3.
- CVE-2026-56371Medium 6.9
ImageMagick - Memory Leak in TXT File Processing via Texture Attribute
Affected: fixed in 14.10.3.
- CVE-2026-56378Medium 6.3
ImageMagick - Heap Out-of-Bounds Read in PCD Decoder
Affected: fixed in 14.10.3.
- CVE-2026-56367Medium 6.3
ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding
Affected: fixed in 14.10.3.
- CVE-2026-33536Medium 5.1
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Affected: fixed in 14.11.1.
- CVE-2026-33535Medium 4.0
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Affected: fixed in 14.11.1.
- CVE-2026-32636Medium 5.3
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
Affected: fixed in 14.11.0.
- CVE-2026-31853Medium 5.7
ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder
Affected: fixed in 14.10.4.
Show all 68 advisoriesShow fewer advisories
- CVE-2026-30937Medium 6.8
ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
Affected: fixed in 14.10.4.
- CVE-2026-30936Medium 5.5
ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage
Affected: fixed in 14.10.4.
- CVE-2026-30935Medium 4.4
ImageMagick has a heap Buffer Over-Read in BilateralBlurImage
Affected: fixed in 14.10.4.
- CVE-2026-30931Medium 6.8
ImageMagick has a heap-based buffer overflow in UHDR encoder
Affected: fixed in 14.10.4.
- CVE-2026-30929High 7.7
ImageMagick has a stack buffer overflow in MagnifyImage
Affected: fixed in 14.10.4.
- CVE-2026-30883Medium 5.7
ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder
Affected: fixed in 14.10.4.
- CVE-2026-28693High 8.1
ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write
Affected: fixed in 14.10.4.
- CVE-2026-28692Medium 4.8
ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
Affected: fixed in 14.10.4.
- CVE-2026-28691High 7.5
ImageMagick has an uninitialized pointer dereference in JBIG decoder
Affected: fixed in 14.10.4.
- CVE-2026-28690Medium 6.9
ImageMagick has a stack write buffer overflow in MNG encoder
Affected: fixed in 14.10.4.
- CVE-2026-28689Medium 6.3
ImageMagick has a Path Policy TOCTOU symlink race bypass
Affected: fixed in 14.10.4.
- CVE-2026-28688Medium 4.0
ImageMagick has a heap use-after-free in the MSL encoder
Affected: fixed in 14.10.4.
- CVE-2026-28687Medium 5.3
ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder
Affected: fixed in 14.10.4.
- CVE-2026-28686Medium 6.8
ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer
Affected: fixed in 14.10.4.
- CVE-2026-28494High 7.1
ImageMagick affected by stack corruption through long morphology kernel names or arrays
Affected: fixed in 14.10.4.
- CVE-2026-28493Medium 6.5
ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder
Affected: fixed in 14.10.4.
- CVE-2026-27799Medium 4.0
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
Affected: fixed in 14.10.3.
- CVE-2026-27798Medium 4.0
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
Affected: fixed in 14.10.3.
- CVE-2026-26983Medium 5.3
ImageMagick: Invalid MSL <map> can result in a use after free
Affected: fixed in 14.10.3.
- CVE-2026-26284Medium 6.5
ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.
Affected: fixed in 14.10.3.
- CVE-2026-26283Medium 6.2
ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`
Affected: fixed in 14.10.3.
- CVE-2026-26066Medium 6.2
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
Affected: fixed in 14.10.3.
- CVE-2026-25989High 7.5
ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
Affected: fixed in 14.10.3.
- CVE-2026-25988Medium 5.3
ImageMagick's MSL image stack index not refreshed, leading to leaked images.
Affected: fixed in 14.10.3.
- CVE-2026-25987Medium 5.3
ImageMagick has heap buffer over-read in MAP image decoder
Affected: fixed in 14.10.3.
- CVE-2026-25986Medium 5.3
ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder
Affected: fixed in 14.10.3.
- CVE-2026-25985High 7.5
Memory allocation with excessive without limits in the internal SVG decoder
Affected: fixed in 14.10.3.
- CVE-2026-25983Medium 5.3
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Affected: fixed in 14.10.3.
- CVE-2026-25982Medium 6.5
ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
Affected: fixed in 14.10.3.
- CVE-2026-25971Medium 6.2
ImageMagick's MSL: Stack overflow in ProcessMSLScript
Affected: fixed in 14.10.3.
- CVE-2026-25970Medium 5.3
ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption
Affected: fixed in 14.10.3.
- CVE-2026-25969Medium 5.3
ImageMagick has Memory Leak in coders/ashlar.c
Affected: fixed in 14.10.3.
- CVE-2026-25968High 7.4
ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.
Affected: fixed in 14.10.3.
- CVE-2026-25967High 7.4
ImageMagick has stack buffer overflow in FTXT reader via oversized integer field
Affected: fixed in 14.10.3.
- CVE-2026-25966Medium 5.9
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
Affected: fixed in 14.10.3.
- CVE-2026-25965High 8.6
ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy
Affected: fixed in 14.10.3.
- CVE-2026-25898Medium 6.5
Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
Affected: fixed in 14.10.3.
- CVE-2026-25897Medium 6.5
ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write
Affected: fixed in 14.10.3.
- CVE-2026-25799Medium 5.3
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
Affected: fixed in 14.10.3.
- CVE-2026-25798Medium 5.3
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
Affected: fixed in 14.10.3.
- CVE-2026-25797Medium 5.7
ImageMagick vulnerable to Code injection via PostScript header in ps coders
Affected: fixed in 14.10.3.
- CVE-2026-25796Medium 5.3
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
Affected: fixed in 14.10.3.
- CVE-2026-25795Medium 5.3
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
Affected: fixed in 14.10.3.
- CVE-2026-25794High 8.2
ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions
Affected: fixed in 14.10.3.
- CVE-2026-25638Medium 5.3
ImageMagick has memory leak in msl encoder
Affected: fixed in 14.10.3.
- CVE-2026-25637Medium 5.3
ImageMagick: Possible memory leak in ASHLAR encoder
Affected: fixed in 14.10.3.
- CVE-2026-25576Medium 5.1
ImageMagick: Out of bounds read in multiple coders read raw pixel data
Affected: fixed in 14.10.3.
- CVE-2026-24485High 7.5
ImageMagick: Infinite loop vulnerability when parsing a PCD file
Affected: fixed in 14.10.3.
- CVE-2026-24484Medium 5.3
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
Affected: fixed in 14.10.3.
- CVE-2026-23952Medium 6.5
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
Affected: fixed in 14.10.2.
- CVE-2026-22770Medium 6.5
ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails
Affected: fixed in 14.10.2.
- CVE-2025-53015High 7.5
ImageMagick has XMP profile write that triggers hang due to unbounded loop
Affected: fixed in 14.7.0.
- CVE-2023-1289Unrated
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault.
Affected: fixed in 13.0.0.