IM
Product
ImageMagick
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch
Add ImageMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: before 6.9.3-10; 7.0.0-0; 7.0.1-0 |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: before 6.9.3-10; 7.0.0-0; 7.0.1-0 |
| CVE-2026-28686 | 6.8 | Mar 9 | ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41 |
| CVE-2026-32259 | 6.7 | Mar 12 | ImageMagick has a possible stack buffer overflow in sixel encoder Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41 |
| CVE-2026-106577 | 6.5 | Oct 7 | ImageMagick: Code Injection in the postscript coders Affected: < 6.9.13-56; >= 7.0.0, < 7.1.2-31 |
| CVE-2026-106574 | 6.5 | Oct 7 | ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash Affected: < 7.1.2-31 |
| CVE-2026-106570 | 6.5 | Oct 7 | ImageMagick: Denial of service in distributed pixel cache server Affected: < 7.1.2-32 |
| CVE-2026-61465 | 6.5 | Jul 11 | ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass Affected: before 7.1.2-26; before 6.9.13-51 |
| CVE-2026-56366 | 6.5 | Jul 10 | ImageMagick - Memory Leak in META Reader APP1JPEG Error Path Affected: before 7.1.2-18; before 6.9.13-43 |
| CVE-2026-53466 | 6.5 | Jul 1 | ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow Affected: < 6.9.13-51; >= 7.0.1-0, < 7.1.2-26 |
| CVE-2026-28690 | 6.5 | Mar 9 | ImageMagick has a stack write buffer overflow in MNG encoder Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41 |
| CVE-2026-28493 | 6.5 | Mar 9 | ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder Affected: < 7.1.2-16 |
| CVE-2026-25982 | 6.5 | Feb 24 | ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage) Affected: >= 7.0.0, < 7.1.2-15; < 6.9.13-40 |
| CVE-2022-44268 | 6.5 | Feb 6 | ImageMagick 7.1.0-49 is vulnerable to Information Disclosure Affected: 7.1.0-49 |
| CVE-2022-44267 | 6.5 | Feb 6 | ImageMagick 7.1.0-49 is vulnerable to Denial of Service Affected: 7.1.0-49 |
| CVE-2021-3596 | 6.5 | Feb 24 | A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c Affected: before 7.0.10-31 |
| CVE-2016-7524 | 6.5 | Feb 6 | coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file Affected: before 6.9.4-0 |
| CVE-2016-7523 | 6.5 | Feb 6 | coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file Affected: before 6.9.4-0 |
| CVE-2014-8561 | 6.5 | Dec 15 | imagemagick 6.8.9.6 has remote DOS via infinite loop Affected: 6.8.9-6 |
| CVE-2019-18853 | 6.5 | Nov 11 | ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2 Affected: 7.0.0-0 before 7.0.9-0 |
| CVE-2019-16713 | 6.5 | Sep 23 | ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c Affected: 7.0.8-43 |
| CVE-2019-16712 | 6.5 | Sep 23 | ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image Affected: 7.0.8-43 |
| CVE-2019-16711 | 6.5 | Sep 23 | ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c Affected: 7.0.8-40 |
| CVE-2019-16710 | 6.5 | Sep 23 | ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c Affected: 7.0.8-35 |
| CVE-2019-16709 | 6.5 | Sep 23 | ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage Affected: 7.0.8-35 |
| CVE-2019-16708 | 6.5 | Sep 23 | ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage Affected: 7.0.8-35 |
| CVE-2019-15141 | 6.5 | Aug 18 | WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a… Affected: 7.0.8-43 |
| CVE-2019-15139 | 6.5 | Aug 18 | The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from… Affected: 7.0.8-41 |
| CVE-2019-14981 | 6.5 | Aug 12 | In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function Affected: 6.0 before 6.9.10-41; 7.0.0-0 before 7.0.8-41 |
| CVE-2019-14980 | 6.5 | Aug 12 | In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service… Affected: 6.0 before 6.9.10-42; 7.0.0-0 before 7.0.8-42 |
| CVE-2019-13454 | 6.5 | Jul 9 | ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c Affected: 7.0.1-0 through 7.0.8-54; 7.0.8-54 |
| CVE-2019-13311 | 6.5 | Jul 5 | ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error Affected: 7.0.8-50 |
| CVE-2019-13310 | 6.5 | Jul 5 | ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c Affected: 7.0.8-50 |
| CVE-2019-13309 | 6.5 | Jul 5 | ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c Affected: 7.0.8-50 |
| CVE-2019-13301 | 6.5 | Jul 5 | ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error Affected: 7.0.8-50 |
| CVE-2019-13296 | 6.5 | Jul 5 | ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value Affected: 7.0.8-50 |
| CVE-2019-13137 | 6.5 | Jul 1 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c Affected: before 6.9.10-50; 7.0.0-0 before 7.0.8-50 |
| CVE-2019-11472 | 6.5 | Apr 23 | ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD… Affected: 7.0.8-41 |
| CVE-2019-11470 | 6.5 | Apr 23 | The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an… Affected: 7.0.8-26 |
| CVE-2019-10714 | 6.5 | Apr 2 | LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV Affected: before 6.9.10-32; 7.0.0-0 before 7.0.8-32 |
| CVE-2018-20467 | 6.5 | Dec 26 | In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption Affected: before 6.9.10-16; 7.0.0-0 before 7.0.8-16 |
| CVE-2018-18544 | 6.5 | Oct 21 | There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31 Affected: 7.0.8-13 |
| CVE-2018-18025 | 6.5 | Oct 7 | In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted… Affected: 7.0.8-13 |
| CVE-2018-18024 | 6.5 | Oct 7 | In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file Affected: 7.0.8-13 |
| CVE-2018-18023 | 6.5 | Oct 7 | In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a… Affected: 7.0.8-13 |
| CVE-2018-18016 | 6.5 | Oct 5 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c Affected: 7.0.7-28 |
| CVE-2018-17967 | 6.5 | Oct 3 | ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c Affected: 7.0.7-28 |
| CVE-2018-17966 | 6.5 | Oct 3 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c Affected: 7.0.7-28 |
| CVE-2018-17965 | 6.5 | Oct 3 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c Affected: 7.0.7-28 |
| CVE-2018-16750 | 6.5 | Sep 9 | In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found Affected: before 6.9.9-42; 7.0.0-0 through 7.0.7-29 |
The 500 most important CVEs for this product (exploited first, then by severity)
