ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-123273ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder
- CVE-2026-119124ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option
- CVE-2026-119123ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder
- CVE-2026-116160ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate
- CVE-2026-116159ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
- CVE-2026-116158ImageMagick before 7.1.2-33 Memory Leak in magick compare
- CVE-2026-116157ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading
- CVE-2026-116156ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option
- CVE-2026-116155ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile
- CVE-2026-116154ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit
- CVE-2026-116153ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit
- CVE-2026-116152ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path
- CVE-2026-116151ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder
- CVE-2026-116150ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder
- CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
- CVE-2026-116148ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options
- CVE-2026-116147ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder
- CVE-2026-116146ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder
- CVE-2026-116145ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix
- CVE-2026-116144ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder
- CVE-2026-116143ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders
- CVE-2026-116142ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box
- CVE-2026-116141ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder
- CVE-2026-116140ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing
- CVE-2026-109964ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
- CVE-2026-109282ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders
- CVE-2026-109281ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option
- CVE-2026-109280ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option
- CVE-2026-109279ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access
- CVE-2026-109278ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation