# cve.now: ImageMagick

The newest entries naming ImageMagick as an affected vendor (up to 200), of 262 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123273](https://cve.now/CVE-2026-123273.md): ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder (CVSS 7.1)
- [CVE-2026-119124](https://cve.now/CVE-2026-119124.md): ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option (CVSS 4.8)
- [CVE-2026-119123](https://cve.now/CVE-2026-119123.md): ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder (CVSS 6.3)
- [CVE-2026-116160](https://cve.now/CVE-2026-116160.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate (CVSS 4.8)
- [CVE-2026-116159](https://cve.now/CVE-2026-116159.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option (CVSS 4.8)
- [CVE-2026-116158](https://cve.now/CVE-2026-116158.md): ImageMagick before 7.1.2-33 Memory Leak in magick compare (CVSS 2.0)
- [CVE-2026-116157](https://cve.now/CVE-2026-116157.md): ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading (CVSS 4.8)
- [CVE-2026-116156](https://cve.now/CVE-2026-116156.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option (CVSS 4.8)
- [CVE-2026-116155](https://cve.now/CVE-2026-116155.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile (CVSS 6.9)
- [CVE-2026-116154](https://cve.now/CVE-2026-116154.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit (CVSS 6.9)
- [CVE-2026-116153](https://cve.now/CVE-2026-116153.md): ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit (CVSS 2.0)
- [CVE-2026-116152](https://cve.now/CVE-2026-116152.md): ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path (CVSS 6.9)
- [CVE-2026-116151](https://cve.now/CVE-2026-116151.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder (CVSS 6.3)
- [CVE-2026-116150](https://cve.now/CVE-2026-116150.md): ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder (CVSS 2.3)
- [CVE-2026-116149](https://cve.now/CVE-2026-116149.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images (CVSS 7.2)
- [CVE-2026-116148](https://cve.now/CVE-2026-116148.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options (CVSS 4.8)
- [CVE-2026-116147](https://cve.now/CVE-2026-116147.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder (CVSS 6.3)
- [CVE-2026-116146](https://cve.now/CVE-2026-116146.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder (CVSS 6.3)
- [CVE-2026-116145](https://cve.now/CVE-2026-116145.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix (CVSS 1.8)
- [CVE-2026-116144](https://cve.now/CVE-2026-116144.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder (CVSS 4.8)
- [CVE-2026-116143](https://cve.now/CVE-2026-116143.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders (CVSS 4.8)
- [CVE-2026-116142](https://cve.now/CVE-2026-116142.md): ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box (CVSS 4.8)
- [CVE-2026-116141](https://cve.now/CVE-2026-116141.md): ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder (CVSS 6.9)
- [CVE-2026-116140](https://cve.now/CVE-2026-116140.md): ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing (CVSS 4.8)
- [CVE-2026-109964](https://cve.now/CVE-2026-109964.md): ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder (CVSS 6.3)
- [CVE-2026-109282](https://cve.now/CVE-2026-109282.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders (CVSS 2.0)
- [CVE-2026-109281](https://cve.now/CVE-2026-109281.md): ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option (CVSS 4.8)
- [CVE-2026-109280](https://cve.now/CVE-2026-109280.md): ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option (CVSS 2.0)
- [CVE-2026-109279](https://cve.now/CVE-2026-109279.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access (CVSS 2.0)
- [CVE-2026-109278](https://cve.now/CVE-2026-109278.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation (CVSS 6.3)
- [CVE-2026-109277](https://cve.now/CVE-2026-109277.md): ImageMagick before 7.1.2-32 Policy Bypass via -script Operation (CVSS 4.8)
- [CVE-2026-109276](https://cve.now/CVE-2026-109276.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder (CVSS 6.9)
- [CVE-2026-109275](https://cve.now/CVE-2026-109275.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder (CVSS 6.3)
- [CVE-2026-109274](https://cve.now/CVE-2026-109274.md): ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script (CVSS 2.0)
- [CVE-2026-109273](https://cve.now/CVE-2026-109273.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder (CVSS 6.9)
- [CVE-2026-109272](https://cve.now/CVE-2026-109272.md): ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder (CVSS 6.3)
- [CVE-2026-109271](https://cve.now/CVE-2026-109271.md): ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder (CVSS 6.3)
- [CVE-2026-109270](https://cve.now/CVE-2026-109270.md): ImageMagick before 7.1.2-32 Memory Leak via -process Option (CVSS 4.8)
- [CVE-2026-109269](https://cve.now/CVE-2026-109269.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder (CVSS 6.9)
- [CVE-2026-109268](https://cve.now/CVE-2026-109268.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000 (CVSS 6.3)
- [CVE-2026-109267](https://cve.now/CVE-2026-109267.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder (CVSS 6.9)
- [CVE-2026-109266](https://cve.now/CVE-2026-109266.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder (CVSS 6.9)
- [CVE-2026-109265](https://cve.now/CVE-2026-109265.md): ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile (CVSS 6.9)
- [CVE-2026-109264](https://cve.now/CVE-2026-109264.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder (CVSS 6.3)
- [CVE-2026-109263](https://cve.now/CVE-2026-109263.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder (CVSS 6.3)
- [CVE-2026-109262](https://cve.now/CVE-2026-109262.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder (CVSS 6.9)
- [CVE-2026-109261](https://cve.now/CVE-2026-109261.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder (CVSS 6.3)
- [CVE-2026-109260](https://cve.now/CVE-2026-109260.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder (CVSS 6.3)
- [CVE-2026-109259](https://cve.now/CVE-2026-109259.md): ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder (CVSS 6.9)
- [CVE-2026-109258](https://cve.now/CVE-2026-109258.md): ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation (CVSS 2.0)
- [CVE-2026-105081](https://cve.now/CVE-2026-105081.md): ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName (CVSS 2.0)
- [CVE-2026-108693](https://cve.now/CVE-2026-108693.md): ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate (CVSS 7.3)
- [CVE-2026-107210](https://cve.now/CVE-2026-107210.md): ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data (CVSS 5.3)
- [CVE-2026-107209](https://cve.now/CVE-2026-107209.md): ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support (CVSS 5.9)
- [CVE-2026-107208](https://cve.now/CVE-2026-107208.md): ImageMagick: Denial of service with crafted XMP profile (CVSS 5.3)
- [CVE-2026-106580](https://cve.now/CVE-2026-106580.md): ImageMagick: Policy Bypass in CUT encoder (CVSS 4.0)
- [CVE-2026-106579](https://cve.now/CVE-2026-106579.md): ImageMagick: Policy Bypass when using coder as the domain. (CVSS 6.2)
- [CVE-2026-106578](https://cve.now/CVE-2026-106578.md): ImageMagick: Invalid Memory Free in MVG decoder (CVSS 5.9)
- [CVE-2026-106577](https://cve.now/CVE-2026-106577.md): ImageMagick: Code Injection in the postscript coders (CVSS 5.3)
- [CVE-2026-106576](https://cve.now/CVE-2026-106576.md): ImageMagick: Denial of service possible when parsing an XMP profile. (CVSS 5.3)
- [CVE-2026-106575](https://cve.now/CVE-2026-106575.md): ImageMagick: Unclosed file pointer in magick script (CVSS 5.3)
- [CVE-2026-106574](https://cve.now/CVE-2026-106574.md): ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash (CVSS 5.3)
- [CVE-2026-106573](https://cve.now/CVE-2026-106573.md): ImageMagick: Denial of service in MVG decoder (CVSS 5.3)
- [CVE-2026-106572](https://cve.now/CVE-2026-106572.md): ImageMagick: Stack Overflown CALS decoder due to missing depth check. (CVSS 5.3)
- [CVE-2026-106571](https://cve.now/CVE-2026-106571.md): ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash (CVSS 5.1)
- [CVE-2026-106570](https://cve.now/CVE-2026-106570.md): ImageMagick: Denial of service in distributed pixel cache server (CVSS 4.3)
- [CVE-2026-106569](https://cve.now/CVE-2026-106569.md): ImageMagick: Denial of service in ASE decoder because of missing security checks (CVSS 5.3)
- [CVE-2026-106568](https://cve.now/CVE-2026-106568.md): ImageMagick: Infinite Loop when reading a crafted XMP profile (CVSS 5.3)
- [CVE-2026-106567](https://cve.now/CVE-2026-106567.md): ImageMagick: Infinite Loop in PSD decoder on 32-bit builds (CVSS 5.9)
- [CVE-2026-106566](https://cve.now/CVE-2026-106566.md): ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check (CVSS 4.0)
- [CVE-2026-106565](https://cve.now/CVE-2026-106565.md): ImageMagick: Infinite Loop in bzip2 compressed images. (CVSS 5.9)
- [CVE-2026-106564](https://cve.now/CVE-2026-106564.md): ImageMagick: Heap Buffer Over-Write in EXR decoder (CVSS 5.3)
- [CVE-2026-105083](https://cve.now/CVE-2026-105083.md): ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE (CVSS 1.8)
- [CVE-2026-102635](https://cve.now/CVE-2026-102635.md): ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder (CVSS 6.3)
- [CVE-2026-93590](https://cve.now/CVE-2026-93590.md): ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder (CVSS 6.3)
- [CVE-2026-93589](https://cve.now/CVE-2026-93589.md): ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder (CVSS 6.3)
- [CVE-2026-93588](https://cve.now/CVE-2026-93588.md): ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM (CVSS 2.3)
- [CVE-2026-93587](https://cve.now/CVE-2026-93587.md): ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder (CVSS 4.8)
- [CVE-2026-93586](https://cve.now/CVE-2026-93586.md): ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob (CVSS 2.1)
- [CVE-2026-86425](https://cve.now/CVE-2026-86425.md): ImageMagick before 7.1.2-30 Heap-use-after-free via Layer (CVSS 4.8)
- [CVE-2026-86424](https://cve.now/CVE-2026-86424.md): ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race (CVSS 2.0)
- [CVE-2026-86423](https://cve.now/CVE-2026-86423.md): ImageMagick before 7.1.2-30 Heap-use-after-free via GetList (CVSS 4.8)
- [CVE-2026-86422](https://cve.now/CVE-2026-86422.md): ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race (CVSS 1.0)
- [CVE-2026-86421](https://cve.now/CVE-2026-86421.md): ImageMagick before 7.1.2-30 Memory Leak via MSL decoder (CVSS 6.3)
- [CVE-2026-86420](https://cve.now/CVE-2026-86420.md): ImageMagick before 7.1.2-30 Denial of Service Memory Budget (CVSS 6.3)
- [CVE-2026-62946](https://cve.now/CVE-2026-62946.md): ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds (CVSS 5.1)
- [CVE-2026-62363](https://cve.now/CVE-2026-62363.md): ImageMagick: Heap Buffer Over-Write in fx operation (CVSS 5.0)
- [CVE-2026-62343](https://cve.now/CVE-2026-62343.md): ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided (CVSS 4.7)
- [CVE-2026-64685](https://cve.now/CVE-2026-64685.md): ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check (CVSS 5.3)
- [CVE-2026-66011](https://cve.now/CVE-2026-66011.md): ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options (CVSS 4.8)
- [CVE-2026-61872](https://cve.now/CVE-2026-61872.md): ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder (CVSS 2.0)
- [CVE-2026-61871](https://cve.now/CVE-2026-61871.md): ImageMagick before 7.1.2-26 Memory Leak in ICON decoder (CVSS 6.3)
- [CVE-2026-61869](https://cve.now/CVE-2026-61869.md): ImageMagick before 7.1.2-26 Memory Leak in MIFF Encoder (CVSS 2.1)
- [CVE-2026-61868](https://cve.now/CVE-2026-61868.md): ImageMagick before 7.1.2-26 Memory Leak in YUV Decoder (CVSS 6.3)
- [CVE-2026-61867](https://cve.now/CVE-2026-61867.md): ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder (CVSS 2.1)
- [CVE-2026-61866](https://cve.now/CVE-2026-61866.md): ImageMagick before 7.1.2-26 Memory Leak in JNG encoder (CVSS 2.1)
- [CVE-2026-61865](https://cve.now/CVE-2026-61865.md): ImageMagick before 7.1.2-26 Memory Leak in Hough Lines (CVSS 2.1)
- [CVE-2026-61864](https://cve.now/CVE-2026-61864.md): ImageMagick before 7.1.2-26 Memory Leak in Log Colorspace (CVSS 2.1)
- [CVE-2026-61863](https://cve.now/CVE-2026-61863.md): ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder (CVSS 2.1)
- [CVE-2026-61862](https://cve.now/CVE-2026-61862.md): ImageMagick before 7.1.2-26 Information Disclosure via identify (CVSS 2.1)
- [CVE-2026-61860](https://cve.now/CVE-2026-61860.md): ImageMagick before 7.1.2-26 Use-After-Free via freetype (CVSS 6.3)
- [CVE-2026-61859](https://cve.now/CVE-2026-61859.md): ImageMagick before 7.1.2-26 Policy Bypass via script operation (CVSS 4.8)
- [CVE-2026-61464](https://cve.now/CVE-2026-61464.md): ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11 (CVSS 1.0)
- [CVE-2026-56375](https://cve.now/CVE-2026-56375.md): ImageMagick - Memory Leak in ASHLAR Coder Action Failure (CVSS 4.8)
- [CVE-2026-61870](https://cve.now/CVE-2026-61870.md): ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder (CVSS 2.1)
- [CVE-2026-61861](https://cve.now/CVE-2026-61861.md): ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption (CVSS 6.3)
- [CVE-2026-61858](https://cve.now/CVE-2026-61858.md): ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder (CVSS 4.8)
- [CVE-2026-61857](https://cve.now/CVE-2026-61857.md): ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP (CVSS 6.3)
- [CVE-2026-61465](https://cve.now/CVE-2026-61465.md): ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass (CVSS 4.8)
- [CVE-2026-56372](https://cve.now/CVE-2026-56372.md): ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method (CVSS 4.8)
- [CVE-2026-56373](https://cve.now/CVE-2026-56373.md): ImageMagick - Use-After-Free Write in PDB Decoder (CVSS 6.3)
- [CVE-2026-56366](https://cve.now/CVE-2026-56366.md): ImageMagick - Memory Leak in META Reader APP1JPEG Error Path (CVSS 4.8)
- [CVE-2026-56374](https://cve.now/CVE-2026-56374.md): ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter (CVSS 4.8)
- [CVE-2026-56362](https://cve.now/CVE-2026-56362.md): ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization (CVSS 2.1)
- [CVE-2026-55597](https://cve.now/CVE-2026-55597.md): ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (CVSS 5.5)
- [CVE-2026-55595](https://cve.now/CVE-2026-55595.md): ImageMagick: Infinite Loop in connected-components when providing invalid arguments (CVSS 4.7)
- [CVE-2026-55594](https://cve.now/CVE-2026-55594.md): ImageMagick: Stack Overflow in MVG decoder due to missing depth check. (CVSS 5.3)
- [CVE-2026-55577](https://cve.now/CVE-2026-55577.md): ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder (CVSS 5.9)
- [CVE-2026-55510](https://cve.now/CVE-2026-55510.md): ImageMagick: Use-After-Free in crafted 8BIM when identifying an image (CVSS 5.5)
- [CVE-2026-53467](https://cve.now/CVE-2026-53467.md): ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged (CVSS 5.3)
- [CVE-2026-53466](https://cve.now/CVE-2026-53466.md): ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow (CVSS 6.5)
- [CVE-2026-55628](https://cve.now/CVE-2026-55628.md): ImageMagick: Policy Bypass in concatenate operation due to missing checks (CVSS 5.5)
- [CVE-2026-56377](https://cve.now/CVE-2026-56377.md): ImageMagick - Policy Bypass via Incorrect Path Validation (CVSS 4.8)
- [CVE-2026-56369](https://cve.now/CVE-2026-56369.md): ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage (CVSS 6.3)
- [CVE-2026-56365](https://cve.now/CVE-2026-56365.md): ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing (CVSS 6.3)
- [CVE-2026-56364](https://cve.now/CVE-2026-56364.md): ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML (CVSS 1.8)
- [CVE-2026-56363](https://cve.now/CVE-2026-56363.md): ImageMagick - Division by Zero in Binomial Kernel Processing (CVSS 4.8)
- [CVE-2026-56361](https://cve.now/CVE-2026-56361.md): ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing (CVSS 4.8)
- [CVE-2026-56370](https://cve.now/CVE-2026-56370.md): ImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact (CVSS 4.8)
- [CVE-2026-56368](https://cve.now/CVE-2026-56368.md): ImageMagick - Memory Leak in Raw Pixel Data Coders (CVSS 6.3)
- [CVE-2026-56379](https://cve.now/CVE-2026-56379.md): ImageMagick - Command Injection via SVG Decoder (CVSS 9.2)
- [CVE-2026-56376](https://cve.now/CVE-2026-56376.md): ImageMagick - Heap Use-After-Free in Meta Coder (CVSS 6.3)
- [CVE-2026-56371](https://cve.now/CVE-2026-56371.md): ImageMagick - Memory Leak in TXT File Processing via Texture Attribute (CVSS 6.9)
- [CVE-2026-56378](https://cve.now/CVE-2026-56378.md): ImageMagick - Heap Out-of-Bounds Read in PCD Decoder (CVSS 6.3)
- [CVE-2026-56367](https://cve.now/CVE-2026-56367.md): ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding (CVSS 6.3)
- [CVE-2026-53465](https://cve.now/CVE-2026-53465.md): ImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame image (CVSS 6.2)
- [CVE-2026-53464](https://cve.now/CVE-2026-53464.md): ImageMagick: Memory Leak in wand option parser when providing invalid arguments (CVSS 4.0)
- [CVE-2026-53463](https://cve.now/CVE-2026-53463.md): ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments (CVSS 4.3)
- [CVE-2026-53462](https://cve.now/CVE-2026-53462.md): ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails (CVSS 5.9)
- [CVE-2026-53461](https://cve.now/CVE-2026-53461.md): ImageMagick: Out-of-bounds write in ICON decoder due to incorrect loop (CVSS 7.5)
- [CVE-2026-53460](https://cve.now/CVE-2026-53460.md): ImageMagick: Policy Bypass can trigger out-of-Memory condition (CVSS 7.5)
- [CVE-2026-49219](https://cve.now/CVE-2026-49219.md): ImageMagick: Policy Bypass can read disallowed files (CVSS 5.5)
- [CVE-2026-49218](https://cve.now/CVE-2026-49218.md): ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions (CVSS 7.5)
- [CVE-2026-48994](https://cve.now/CVE-2026-48994.md): ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems (CVSS 5.9)
- [CVE-2026-48734](https://cve.now/CVE-2026-48734.md): ImageMagick: Stack Overflow in MVG decoder (CVSS 5.5)
- [CVE-2026-48733](https://cve.now/CVE-2026-48733.md): ImageMagick: Infinite Loop in subimage-search with crafted image (CVSS 4.7)
- [CVE-2026-48724](https://cve.now/CVE-2026-48724.md): ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth dithering (CVSS 5.5)
- [CVE-2026-47166](https://cve.now/CVE-2026-47166.md): ImageMagick: Heap Buffer Over-Read in distributed pixel cache server (CVSS 5.7)
- [CVE-2026-47165](https://cve.now/CVE-2026-47165.md): ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model (CVSS 4.1)
- [CVE-2026-46693](https://cve.now/CVE-2026-46693.md): ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking (CVSS 4.1)
- [CVE-2026-46692](https://cve.now/CVE-2026-46692.md): ImageMagick: Heap Buffer Over-Write in distributed pixel cache server (CVSS 4.1)
- [CVE-2026-46559](https://cve.now/CVE-2026-46559.md): ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder (CVSS 4.0)
- [CVE-2026-46557](https://cve.now/CVE-2026-46557.md): ImageMagick: Stack overflow in fx operation (CVSS 6.2)
- [CVE-2026-46521](https://cve.now/CVE-2026-46521.md): ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression (CVSS 5.5)
- [CVE-2026-46520](https://cve.now/CVE-2026-46520.md): ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions (CVSS 7.5)
- [CVE-2026-45664](https://cve.now/CVE-2026-45664.md): ImageMagick: Policy Bypass in MNG coder could (CVSS 5.3)
- [CVE-2026-46522](https://cve.now/CVE-2026-46522.md): ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion (CVSS 7.5)
- [CVE-2026-45624](https://cve.now/CVE-2026-45624.md): ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation. (CVSS 5.1)
- [CVE-2026-45359](https://cve.now/CVE-2026-45359.md): ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define (CVSS 5.7)
- [CVE-2026-45358](https://cve.now/CVE-2026-45358.md): ImageMagick: Out-of-Bounds Read of a single byte in meta encoder (CVSS 5.3)
- [CVE-2026-42326](https://cve.now/CVE-2026-42326.md): ImageMagick: Heap Buffer Over-Read in IPTC encoder (CVSS 5.1)
- [CVE-2026-45031](https://cve.now/CVE-2026-45031.md): ImageMagick: Policy Bypass in PSD decoder (CVSS 5.3)
- [CVE-2026-46523](https://cve.now/CVE-2026-46523.md): ImageMagick: Use-After-Free in MSL decoder. (CVSS 6.2)
- [CVE-2026-42050](https://cve.now/CVE-2026-42050.md): ImageMagick: Stack buffer overflow in XTileImage (CVSS 5.5)
- [CVE-2026-40312](https://cve.now/CVE-2026-40312.md): ImageMagick: Off-by-One in MSL decoder could result in crash (CVSS 6.2)
- [CVE-2026-40311](https://cve.now/CVE-2026-40311.md): ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values (CVSS 5.5)
- [CVE-2026-40310](https://cve.now/CVE-2026-40310.md): ImageMagick: Heap out-of-bounds write in JP2 encoder (CVSS 5.5)
- [CVE-2026-40183](https://cve.now/CVE-2026-40183.md): ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float (CVSS 5.5)
- [CVE-2026-40169](https://cve.now/CVE-2026-40169.md): ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders (CVSS 6.2)
- [CVE-2026-34238](https://cve.now/CVE-2026-34238.md): ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (CVSS 5.1)
- [CVE-2026-33908](https://cve.now/CVE-2026-33908.md): ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree() (CVSS 7.5)
- [CVE-2026-33905](https://cve.now/CVE-2026-33905.md): ImageMagick has an Out-of-Bounds read via -sample operation (CVSS 5.5)
- [CVE-2026-33902](https://cve.now/CVE-2026-33902.md): ImageMagick: Stack Overflow via Recursive FX Expression Parsing (CVSS 5.5)
- [CVE-2026-33901](https://cve.now/CVE-2026-33901.md): ImageMagick has a Heap Buffer Overflow via MVG decoder (CVSS 7.5)
- [CVE-2026-33900](https://cve.now/CVE-2026-33900.md): ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (CVSS 5.9)
- [CVE-2026-33899](https://cve.now/CVE-2026-33899.md): ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML (CVSS 5.3)
- [CVE-2026-33536](https://cve.now/CVE-2026-33536.md): ImageMagick has an Out-of-bounds Write via InterpretImageFilename (CVSS 5.1)
- [CVE-2026-33535](https://cve.now/CVE-2026-33535.md): ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction (CVSS 4.0)
- [CVE-2026-32636](https://cve.now/CVE-2026-32636.md): ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash (CVSS 5.3)
- [CVE-2026-32259](https://cve.now/CVE-2026-32259.md): ImageMagick has a possible stack buffer overflow in sixel encoder (CVSS 6.7)
- [CVE-2026-31853](https://cve.now/CVE-2026-31853.md): ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder (CVSS 5.7)
- [CVE-2026-30937](https://cve.now/CVE-2026-30937.md): ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes\_per\_line calculation (CVSS 6.8)
- [CVE-2026-30936](https://cve.now/CVE-2026-30936.md): ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage (CVSS 5.5)
- [CVE-2026-30935](https://cve.now/CVE-2026-30935.md): ImageMagick has a heap Buffer Over-Read in BilateralBlurImage (CVSS 4.4)
- [CVE-2026-30931](https://cve.now/CVE-2026-30931.md): ImageMagick has a heap-based buffer overflow in UHDR encoder (CVSS 6.8)
- [CVE-2026-30929](https://cve.now/CVE-2026-30929.md): ImageMagick has a stack buffer overflow in MagnifyImage (CVSS 7.7)
- [CVE-2026-30883](https://cve.now/CVE-2026-30883.md): ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder (CVSS 5.7)
- [CVE-2026-28693](https://cve.now/CVE-2026-28693.md): ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write (CVSS 8.1)
- [CVE-2026-28692](https://cve.now/CVE-2026-28692.md): ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder (CVSS 4.8)
- [CVE-2026-28691](https://cve.now/CVE-2026-28691.md): ImageMagick has an uninitialized pointer dereference in JBIG decoder (CVSS 7.5)
- [CVE-2026-28690](https://cve.now/CVE-2026-28690.md): ImageMagick has a stack write buffer overflow in MNG encoder (CVSS 6.9)
- [CVE-2026-28689](https://cve.now/CVE-2026-28689.md): ImageMagick has a Path Policy TOCTOU symlink race bypass (CVSS 6.3)
- [CVE-2026-28688](https://cve.now/CVE-2026-28688.md): ImageMagick has a heap use-after-free in the MSL encoder (CVSS 4.0)
- [CVE-2026-28687](https://cve.now/CVE-2026-28687.md): ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder (CVSS 5.3)
- [CVE-2026-28686](https://cve.now/CVE-2026-28686.md): ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer (CVSS 6.8)
- [CVE-2026-28494](https://cve.now/CVE-2026-28494.md): ImageMagick affected by stack corruption through long morphology kernel names or arrays (CVSS 7.1)
- [CVE-2026-28493](https://cve.now/CVE-2026-28493.md): ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder (CVSS 6.5)
- [CVE-2026-27799](https://cve.now/CVE-2026-27799.md): ImageMagick has a heap Buffer Over-read in its DJVU image format handler (CVSS 4.0)
- [CVE-2026-27798](https://cve.now/CVE-2026-27798.md): ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images (CVSS 4.0)
- [CVE-2026-26983](https://cve.now/CVE-2026-26983.md): ImageMagick: Invalid MSL \<map\> can result in a use after free (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/imagemagick
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.