ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-53466ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
- CVE-2026-55628ImageMagick: Policy Bypass in concatenate operation due to missing checks
- CVE-2026-56377ImageMagick - Policy Bypass via Incorrect Path Validation
- CVE-2026-56369ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage
- CVE-2026-56365ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing
- CVE-2026-56364ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML
- CVE-2026-56363ImageMagick - Division by Zero in Binomial Kernel Processing
- CVE-2026-56361ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing
- CVE-2026-56370ImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact
- CVE-2026-56368ImageMagick - Memory Leak in Raw Pixel Data Coders
- CVE-2026-56379ImageMagick - Command Injection via SVG Decoder
- CVE-2026-56376ImageMagick - Heap Use-After-Free in Meta Coder
- CVE-2026-56371ImageMagick - Memory Leak in TXT File Processing via Texture Attribute
- CVE-2026-56378ImageMagick - Heap Out-of-Bounds Read in PCD Decoder
- CVE-2026-56367ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding
- CVE-2026-53465ImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
- CVE-2026-53464ImageMagick: Memory Leak in wand option parser when providing invalid arguments
- CVE-2026-53463ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments
- CVE-2026-53462ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails
- CVE-2026-53461ImageMagick: Out-of-bounds write in ICON decoder due to incorrect loop
- CVE-2026-53460ImageMagick: Policy Bypass can trigger out-of-Memory condition
- CVE-2026-49219ImageMagick: Policy Bypass can read disallowed files
- CVE-2026-49218ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
- CVE-2026-48994ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems
- CVE-2026-48734ImageMagick: Stack Overflow in MVG decoder
- CVE-2026-48733ImageMagick: Infinite Loop in subimage-search with crafted image
- CVE-2026-48724ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth dithering
- CVE-2026-47166ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
- CVE-2026-47165ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
- CVE-2026-46693ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking