ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-46692ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
- CVE-2026-46559ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder
- CVE-2026-46557ImageMagick: Stack overflow in fx operation
- CVE-2026-46521ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
- CVE-2026-46520ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
- CVE-2026-45664ImageMagick: Policy Bypass in MNG coder could
- CVE-2026-46522ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
- CVE-2026-45624ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
- CVE-2026-45359ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
- CVE-2026-45358ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
- CVE-2026-42326ImageMagick: Heap Buffer Over-Read in IPTC encoder
- CVE-2026-45031ImageMagick: Policy Bypass in PSD decoder
- CVE-2026-46523ImageMagick: Use-After-Free in MSL decoder.
- CVE-2026-42050ImageMagick: Stack buffer overflow in XTileImage
- CVE-2026-40312ImageMagick: Off-by-One in MSL decoder could result in crash
- CVE-2026-40311ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
- CVE-2026-40310ImageMagick: Heap out-of-bounds write in JP2 encoder
- CVE-2026-40183ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float
- CVE-2026-40169ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders
- CVE-2026-34238ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds
- CVE-2026-33908ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()
- CVE-2026-33905ImageMagick has an Out-of-Bounds read via -sample operation
- CVE-2026-33902ImageMagick: Stack Overflow via Recursive FX Expression Parsing
- CVE-2026-33901ImageMagick has a Heap Buffer Overflow via MVG decoder
- CVE-2026-33900ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
- CVE-2026-33899ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML
- CVE-2026-33536ImageMagick has an Out-of-bounds Write via InterpretImageFilename
- CVE-2026-33535ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
- CVE-2026-32636ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
- CVE-2026-32259ImageMagick has a possible stack buffer overflow in sixel encoder