IM
Product
ImageMagick
by ImageMagick · last CVE Oct 25, 2026
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch

Add ImageMagick to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3715
In wildKEV
5.5
75%
May 5
ImageMagick Arbitrary File Deletion Vulnerability
Affected: before 6.9.3-10; 7.0.0-0; 7.0.1-0
CVE-2016-3718
In wildKEV
5.5
76%
May 5
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
Affected: before 6.9.3-10; 7.0.0-0; 7.0.1-0
CVE-2026-28686
6.8
0%
Mar 9
ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer
Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41
CVE-2026-32259
6.7
0%
Mar 12
ImageMagick has a possible stack buffer overflow in sixel encoder
Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41
CVE-2026-106577
6.5
0%
Oct 7
ImageMagick: Code Injection in the postscript coders
Affected: < 6.9.13-56; >= 7.0.0, < 7.1.2-31
CVE-2026-106574
6.5
0%
Oct 7
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
Affected: < 7.1.2-31
CVE-2026-106570
6.5
0%
Oct 7
ImageMagick: Denial of service in distributed pixel cache server
Affected: < 7.1.2-32
CVE-2026-61465
6.5
0%
Jul 11
ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass
Affected: before 7.1.2-26; before 6.9.13-51
CVE-2026-56366
6.5
0%
Jul 10
ImageMagick - Memory Leak in META Reader APP1JPEG Error Path
Affected: before 7.1.2-18; before 6.9.13-43
CVE-2026-53466
6.5
0%
Jul 1
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
Affected: < 6.9.13-51; >= 7.0.1-0, < 7.1.2-26
CVE-2026-28690
6.5
0%
Mar 9
ImageMagick has a stack write buffer overflow in MNG encoder
Affected: >= 7.0.0, < 7.1.2-16; < 6.9.13-41
CVE-2026-28493
6.5
0%
Mar 9
ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder
Affected: < 7.1.2-16
CVE-2026-25982
6.5
0%
Feb 24
ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
Affected: >= 7.0.0, < 7.1.2-15; < 6.9.13-40
CVE-2022-44268
6.5
90%
Feb 6
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure
Affected: 7.1.0-49
CVE-2022-44267
6.5
77%
Feb 6
ImageMagick 7.1.0-49 is vulnerable to Denial of Service
Affected: 7.1.0-49
CVE-2021-3596
6.5
2%
Feb 24
A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c
Affected: before 7.0.10-31
CVE-2016-7524
6.5
2%
Feb 6
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file
Affected: before 6.9.4-0
CVE-2016-7523
6.5
3%
Feb 6
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file
Affected: before 6.9.4-0
CVE-2014-8561
6.5
2%
Dec 15
imagemagick 6.8.9.6 has remote DOS via infinite loop
Affected: 6.8.9-6
CVE-2019-18853
6.5
1%
Nov 11
ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2
Affected: 7.0.0-0 before 7.0.9-0
CVE-2019-16713
6.5
2%
Sep 23
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c
Affected: 7.0.8-43
CVE-2019-16712
6.5
3%
Sep 23
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image
Affected: 7.0.8-43
CVE-2019-16711
6.5
2%
Sep 23
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c
Affected: 7.0.8-40
CVE-2019-16710
6.5
2%
Sep 23
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c
Affected: 7.0.8-35
CVE-2019-16709
6.5
3%
Sep 23
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage
Affected: 7.0.8-35
CVE-2019-16708
6.5
2%
Sep 23
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage
Affected: 7.0.8-35
CVE-2019-15141
6.5
2%
Aug 18
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a…
Affected: 7.0.8-43
CVE-2019-15139
6.5
3%
Aug 18
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from…
Affected: 7.0.8-41
CVE-2019-14981
6.5
3%
Aug 12
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function
Affected: 6.0 before 6.9.10-41; 7.0.0-0 before 7.0.8-41
CVE-2019-14980
6.5
2%
Aug 12
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service…
Affected: 6.0 before 6.9.10-42; 7.0.0-0 before 7.0.8-42
CVE-2019-13454
6.5
4%
Jul 9
ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c
Affected: 7.0.1-0 through 7.0.8-54; 7.0.8-54
CVE-2019-13311
6.5
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error
Affected: 7.0.8-50
CVE-2019-13310
6.5
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c
Affected: 7.0.8-50
CVE-2019-13309
6.5
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c
Affected: 7.0.8-50
CVE-2019-13301
6.5
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error
Affected: 7.0.8-50
CVE-2019-13296
6.5
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value
Affected: 7.0.8-50
CVE-2019-13137
6.5
2%
Jul 1
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c
Affected: before 6.9.10-50; 7.0.0-0 before 7.0.8-50
CVE-2019-11472
6.5
3%
Apr 23
ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD…
Affected: 7.0.8-41
CVE-2019-11470
6.5
4%
Apr 23
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an…
Affected: 7.0.8-26
CVE-2019-10714
6.5
2%
Apr 2
LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV
Affected: before 6.9.10-32; 7.0.0-0 before 7.0.8-32
CVE-2018-20467
6.5
3%
Dec 26
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption
Affected: before 6.9.10-16; 7.0.0-0 before 7.0.8-16
CVE-2018-18544
6.5
2%
Oct 21
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31
Affected: 7.0.8-13
CVE-2018-18025
6.5
3%
Oct 7
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted…
Affected: 7.0.8-13
CVE-2018-18024
6.5
3%
Oct 7
In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file
Affected: 7.0.8-13
CVE-2018-18023
6.5
1%
Oct 7
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a…
Affected: 7.0.8-13
CVE-2018-18016
6.5
2%
Oct 5
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c
Affected: 7.0.7-28
CVE-2018-17967
6.5
1%
Oct 3
ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c
Affected: 7.0.7-28
CVE-2018-17966
6.5
2%
Oct 3
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c
Affected: 7.0.7-28
CVE-2018-17965
6.5
2%
Oct 3
ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c
Affected: 7.0.7-28
CVE-2018-16750
6.5
3%
Sep 9
In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found
Affected: before 6.9.9-42; 7.0.0-0 through 7.0.7-29
Page 1 of 5 · 205 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)