IM
Product
ImageMagick
by ImageMagick · last CVE Oct 25, 2026
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch

Add ImageMagick to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25898
9.1
0%
Feb 24
Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
Affected: >= 7.0.0, < 7.1.2-15; < 6.9.13-40
CVE-2019-19949
9.1
3%
Dec 24
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare
Affected: 6.9.9-33 before 6.9.10-43; 7.0.7-23 before 7.0.8-43
CVE-2016-6520
9.1
4%
Dec 13
Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology
Affected: 7.0.0-0 before 7.0.2-7
CVE-2025-57803
8.8
1%
Aug 26
ImageMagick is free and open-source software used for editing and manipulating digital images
Affected: before 6.9.13-28; 7.0.0-0 before 7.1.2-2
CVE-2025-55298
8.8
5%
Aug 26
ImageMagick is free and open-source software used for editing and manipulating digital images
Affected: before 6.9.13-28; 7.0.0-0 before 7.1.2-2
CVE-2014-2030
8.8
11%
Feb 6
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and…
Affected: 6.8.8-5
CVE-2014-1958
8.8
4%
Feb 6
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image,…
Affected: before 6.8.8-5
CVE-2019-17547
8.8
2%
Oct 14
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free
Affected: before 7.0.8-62
CVE-2019-17541
8.8
2%
Oct 14
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c
Affected: before 6.9.10-55; 7.0.0-0 before 7.0.8-55
CVE-2019-17540
8.8
2%
Oct 14
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c
Affected: 6.9.10-54 before 6.9.10-55; 7.0.0-0 before 7.0.8-54
CVE-2019-15140
8.8
4%
Aug 18
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by…
Affected: 7.0.8-43
CVE-2019-13391
8.8
3%
Jul 7
In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels
Affected: 7.0.8-50
CVE-2019-13308
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage
Affected: 7.0.8-50
CVE-2019-13303
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage
Affected: 7.0.8-50
CVE-2019-13302
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages
Affected: 7.0.8-50
CVE-2019-13300
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns
Affected: 7.0.8-50
CVE-2019-13299
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel
Affected: 7.0.8-50
CVE-2019-13298
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error
Affected: 7.0.8-50
CVE-2019-13297
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled
Affected: 7.0.8-50
CVE-2019-13295
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled
Affected: 7.0.8-50
CVE-2019-13135
8.8
3%
Jul 1
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c
Affected: before 6.9.10-50; 7.0.0-0 before 7.0.8-50
CVE-2019-9956
8.8
6%
Mar 24
In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code…
Affected: 7.0.8-35
CVE-2018-16413
8.8
4%
Sep 3
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks…
Affected: 7.0.8-11
CVE-2018-16412
8.8
4%
Sep 3
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function
Affected: 7.0.8-11
CVE-2018-12600
8.8
3%
Jun 20
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file
Affected: 7.0.8-3
CVE-2018-12599
8.8
3%
Jun 20
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file
Affected: 7.0.8-3
CVE-2018-11625
8.8
2%
May 31
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file
Affected: 7.0.7-37
CVE-2018-11624
8.8
2%
May 31
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file
Affected: 7.0.7-36
CVE-2018-9135
8.8
2%
Mar 30
In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c
Affected: 7.0.7-24
CVE-2018-8960
8.8
4%
Mar 23
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read
Affected: 7.0.7-26
CVE-2018-8804
8.8
4%
Mar 20
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly…
Affected: 7.0.7-25q16
CVE-2017-18209
8.8
3%
Mar 1
In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not…
Affected: 7.0.7-0; 7.0.7-1; 7.0.7-2; 7.0.7-3; 7.0.7-4; 7.0.7-5; +20 more
CVE-2018-5248
8.8
4%
Jan 5
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function
Affected: 7.0.7-17
CVE-2017-17880
8.8
2%
Dec 27
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check
Affected: 7.0.7-16
CVE-2017-17879
8.8
3%
Dec 27
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one…
Affected: 7.0.7-16
CVE-2017-16546
8.8
2%
Nov 5
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of…
Affected: 7.0.7-9
CVE-2017-15281
8.8
3%
Oct 12
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a…
Affected: 7.0.7-6
CVE-2017-15017
8.8
2%
Oct 5
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c
Affected: 7.0.7-0
CVE-2017-15016
8.8
2%
Oct 5
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c
Affected: 7.0.7-0
CVE-2017-15015
8.8
1%
Oct 5
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c
Affected: 7.0.7-0
CVE-2017-14682
8.8
2%
Sep 21
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have…
Affected: 7.0.6
CVE-2017-14224
8.8
4%
Sep 9
A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file
Affected: 7.0.6-8
CVE-2017-13146
8.8
1%
Aug 23
In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c
Affected: through 6.9.8-4; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more
CVE-2017-12983
8.8
2%
Aug 21
Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly…
Affected: 7.0.6-8
CVE-2017-12669
8.8
1%
Aug 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c
Affected: 7.0.6-2
CVE-2017-12668
8.8
1%
Aug 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c
Affected: 7.0.6-2
CVE-2017-12667
8.8
1%
Aug 7
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c
Affected: 7.0.6-1
CVE-2017-12666
8.8
2%
Aug 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c
Affected: 7.0.6-2
CVE-2017-12665
8.8
2%
Aug 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c
Affected: 7.0.6-2
CVE-2017-12664
8.8
2%
Aug 7
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c
Affected: 7.0.6-2
Page 2 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)