ImageMagick vulnerabilities
262 CVEs and advisories name ImageMagick as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-65955ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
- CVE-2025-62594ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
- CVE-2025-62171ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
- CVE-2025-57807ImageMagick BlobStream Forward-Seek Under-Allocation
- CVE-2025-57803ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
- CVE-2025-55298ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
- CVE-2025-55212ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
- CVE-2025-55160ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree
- CVE-2025-55154ImageMagick: integer overflows in MNG magnification
- CVE-2025-55005ImageMagick: heap-buffer overflow in log colorspace handling
- CVE-2025-55004ImageMagick: heap-buffer overflow read in MNG magnification with alpha
- CVE-2025-53101ImageMagick has Stack Buffer Overflow in image.c
- CVE-2025-53019ImageMagick has Memory Leak in magick stream
- CVE-2025-53015ImageMagick has XMP profile write that triggers hang due to unbounded loop
- CVE-2025-53014ImageMagick has Heap Buffer Overflow in InterpretImageFilename
- CVE-2025-46393In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels i
- CVE-2025-43965In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.
- CVE-2024-41817Arbitrary Code Execution in `AppImage` version `ImageMagick`
- CVE-2021-39212Issue when Configuring the ImageMagick Security Policy
- CVE-2016-7524coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- CVE-2016-7523coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- CVE-2019-10131An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c