ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109277ImageMagick before 7.1.2-32 Policy Bypass via -script Operation
- CVE-2026-109276ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder
- CVE-2026-109275ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder
- CVE-2026-109274ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script
- CVE-2026-109273ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder
- CVE-2026-109272ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder
- CVE-2026-109271ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder
- CVE-2026-109270ImageMagick before 7.1.2-32 Memory Leak via -process Option
- CVE-2026-109269ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder
- CVE-2026-109268ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000
- CVE-2026-109267ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder
- CVE-2026-109266ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder
- CVE-2026-109265ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile
- CVE-2026-109264ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder
- CVE-2026-109263ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder
- CVE-2026-109262ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder
- CVE-2026-109261ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder
- CVE-2026-109260ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder
- CVE-2026-109259ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder
- CVE-2026-109258ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation
- CVE-2026-105081ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName
- CVE-2026-108693ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate
- CVE-2026-107210ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data
- CVE-2026-107209ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support
- CVE-2026-107208ImageMagick: Denial of service with crafted XMP profile
- CVE-2026-106580ImageMagick: Policy Bypass in CUT encoder
- CVE-2026-106579ImageMagick: Policy Bypass when using coder as the domain.
- CVE-2026-106578ImageMagick: Invalid Memory Free in MVG decoder
- CVE-2026-106577ImageMagick: Code Injection in the postscript coders
- CVE-2026-106576ImageMagick: Denial of service possible when parsing an XMP profile.