ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-106575ImageMagick: Unclosed file pointer in magick script
- CVE-2026-106574ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
- CVE-2026-106573ImageMagick: Denial of service in MVG decoder
- CVE-2026-106572ImageMagick: Stack Overflown CALS decoder due to missing depth check.
- CVE-2026-106571ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash
- CVE-2026-106570ImageMagick: Denial of service in distributed pixel cache server
- CVE-2026-106569ImageMagick: Denial of service in ASE decoder because of missing security checks
- CVE-2026-106568ImageMagick: Infinite Loop when reading a crafted XMP profile
- CVE-2026-106567ImageMagick: Infinite Loop in PSD decoder on 32-bit builds
- CVE-2026-106566ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check
- CVE-2026-106565ImageMagick: Infinite Loop in bzip2 compressed images.
- CVE-2026-106564ImageMagick: Heap Buffer Over-Write in EXR decoder
- CVE-2026-105083ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE
- CVE-2026-102635ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder
- CVE-2026-93590ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder
- CVE-2026-93589ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder
- CVE-2026-93588ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM
- CVE-2026-93587ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder
- CVE-2026-93586ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob
- CVE-2026-86425ImageMagick before 7.1.2-30 Heap-use-after-free via Layer
- CVE-2026-86424ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race
- CVE-2026-86423ImageMagick before 7.1.2-30 Heap-use-after-free via GetList
- CVE-2026-86422ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race
- CVE-2026-86421ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
- CVE-2026-86420ImageMagick before 7.1.2-30 Denial of Service Memory Budget
- CVE-2026-62946ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
- CVE-2026-62363ImageMagick: Heap Buffer Over-Write in fx operation
- CVE-2026-62343ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
- CVE-2026-64685ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check
- CVE-2026-66011ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options