IM
Product
ImageMagick
by ImageMagick · last CVE Oct 25, 2026
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch

Add ImageMagick to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-16749
6.5
2%
Sep 9
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and…
Affected: before 6.9.9-42; 7.0.0-0 through 7.0.7-29
CVE-2018-16645
6.5
3%
Sep 6
There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers…
Affected: 7.0.8-11
CVE-2018-16644
6.5
4%
Sep 6
There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to…
Affected: 7.0.8-11
CVE-2018-16643
6.5
3%
Sep 6
The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check…
Affected: 7.0.8-4
CVE-2018-16642
6.5
3%
Sep 6
The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write
Affected: 7.0.7-37
CVE-2018-16641
6.5
2%
Sep 6
ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c
Affected: 7.0.8-6
CVE-2018-16640
6.5
3%
Sep 6
ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c
Affected: 7.0.8-5
CVE-2018-16323
6.5
49%
Sep 1
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value
Affected: before 6.9.10-9; 7.0.0-0 before 7.0.8-9
CVE-2018-15607
6.5
5%
Aug 21
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes…
Affected: 7.0.8-11
CVE-2018-14437
6.5
2%
Jul 20
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c
Affected: 7.0.8-4
CVE-2018-14436
6.5
2%
Jul 20
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c
Affected: 7.0.8-4
CVE-2018-14435
6.5
2%
Jul 20
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c
Affected: 7.0.8-4
CVE-2018-14434
6.5
3%
Jul 20
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c
Affected: 7.0.8-4
CVE-2018-13153
6.5
4%
Jul 5
In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c
Affected: 7.0.8-4
CVE-2018-11656
6.5
2%
Jun 1
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a…
Affected: 7.0.7-20
CVE-2018-11655
6.5
2%
Jun 1
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of…
Affected: 7.0.7-20
CVE-2018-11251
6.5
2%
May 18
In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service…
Affected: 7.0.7-16 before 7.0.7-21; 7.0.7-23
CVE-2017-18273
6.5
2%
May 18
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of…
Affected: 7.0.7-16
CVE-2017-18272
6.5
1%
May 18
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG…
Affected: 7.0.7-16 before 7.0.7-21
CVE-2017-18271
6.5
2%
May 18
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of…
Affected: 7.0.7-16
CVE-2018-10805
6.5
2%
May 8
ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c
Affected: 7.0.7-28
CVE-2018-10804
6.5
2%
May 8
ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c
Affected: 7.0.7-28
CVE-2018-10177
6.5
3%
Apr 16
In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file
Affected: 7.0.7-28
CVE-2018-9133
6.5
3%
Mar 30
ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file
Affected: 7.0.7-26
CVE-2017-18254
6.5
2%
Mar 27
An issue was discovered in ImageMagick 7.0.7
Affected: 7.0.7
CVE-2017-18253
6.5
1%
Mar 27
An issue was discovered in ImageMagick 7.0.7
Affected: 7.0.7
CVE-2017-18252
6.5
2%
Mar 27
An issue was discovered in ImageMagick 7.0.7
Affected: 7.0.7
CVE-2017-18251
6.5
2%
Mar 27
An issue was discovered in ImageMagick 7.0.7
Affected: 7.0.7
CVE-2017-18250
6.5
1%
Mar 27
An issue was discovered in ImageMagick 7.0.7
Affected: 7.0.7-0
CVE-2018-7470
6.5
2%
Feb 25
An issue was discovered in ImageMagick 7.0.7-22 Q16
Affected: 7.0.7-22
CVE-2018-7443
6.5
3%
Feb 23
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a…
Affected: 7.0.7-23
CVE-2018-6930
6.5
2%
Feb 13
A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service…
Affected: 7.0.7-22
CVE-2018-6876
6.5
2%
Feb 9
The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service…
Affected: 7.0.7-22
CVE-2018-6405
6.5
2%
Jan 30
In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer
Affected: before 6.9.9-35; 7.0.0-0 before 7.0.7-23
CVE-2017-18029
6.5
4%
Jan 12
In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a…
Affected: 7.0.6-10
CVE-2017-18028
6.5
2%
Jan 12
In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service…
Affected: 7.0.7-1
CVE-2017-18027
6.5
3%
Jan 12
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a…
Affected: 7.0.7-1
CVE-2018-5358
6.5
2%
Jan 12
ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c
Affected: 7.0.7-22
CVE-2018-5357
6.5
4%
Jan 12
ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c
Affected: 7.0.7-22
CVE-2018-5247
6.5
2%
Jan 5
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c
Affected: 7.0.7-17
CVE-2018-5246
6.5
4%
Jan 5
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c
Affected: 7.0.7-17
CVE-2017-18022
6.5
3%
Jan 5
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c
Affected: 7.0.7-12
CVE-2017-1000476
6.5
3%
Jan 3
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service
Affected: 7.0.7-12
CVE-2017-1000445
6.5
2%
Jan 2
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
Affected: before 6.9.9-15; 7.0.0-0 through 7.0.7-1
CVE-2017-18008
6.5
3%
Jan 1
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c
Affected: 7.0.7-17
CVE-2017-17934
6.5
2%
Dec 27
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls
Affected: 7.0.7-17
CVE-2017-17914
6.5
2%
Dec 27
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large…
Affected: 7.0.7-16
CVE-2017-17887
6.5
1%
Dec 27
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a…
Affected: 7.0.7-16
CVE-2017-17886
6.5
1%
Dec 27
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a…
Affected: 7.0.7-12
CVE-2017-17885
6.5
1%
Dec 27
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a…
Affected: 7.0.7-12
Page 2 of 5 · 205 total
123…5
The 500 most important CVEs for this product (exploited first, then by severity)