ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-31853ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder
- CVE-2026-30937ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
- CVE-2026-30936ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage
- CVE-2026-30935ImageMagick has a heap Buffer Over-Read in BilateralBlurImage
- CVE-2026-30931ImageMagick has a heap-based buffer overflow in UHDR encoder
- CVE-2026-30929ImageMagick has a stack buffer overflow in MagnifyImage
- CVE-2026-30883ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder
- CVE-2026-28693ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write
- CVE-2026-28692ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
- CVE-2026-28691ImageMagick has an uninitialized pointer dereference in JBIG decoder
- CVE-2026-28690ImageMagick has a stack write buffer overflow in MNG encoder
- CVE-2026-28689ImageMagick has a Path Policy TOCTOU symlink race bypass
- CVE-2026-28688ImageMagick has a heap use-after-free in the MSL encoder
- CVE-2026-28687ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder
- CVE-2026-28686ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer
- CVE-2026-28494ImageMagick affected by stack corruption through long morphology kernel names or arrays
- CVE-2026-28493ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder
- CVE-2026-27799ImageMagick has a heap Buffer Over-read in its DJVU image format handler
- CVE-2026-27798ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
- CVE-2026-26983ImageMagick: Invalid MSL <map> can result in a use after free
- CVE-2026-26284ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.
- CVE-2026-26283ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`
- CVE-2026-26066ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
- CVE-2026-25989ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
- CVE-2026-25988ImageMagick's MSL image stack index not refreshed, leading to leaked images.
- CVE-2026-25987ImageMagick has heap buffer over-read in MAP image decoder
- CVE-2026-25986ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder
- CVE-2026-25985Memory allocation with excessive without limits in the internal SVG decoder
- CVE-2026-25983ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
- CVE-2026-25982ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)