IM
Vendor
ImageMagick
902
CVEs
3
On KEV
71
New 30D
Products
IM9.8
ImageMagick
ImageMagick
899 CVEs3 on KEV71 new
GR–
Graphicsmagick
Imagemagick
2 CVEs0 on KEV0 new
LL–
Libmagick Library
Imagemagick
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116160 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate |
| CVE-2026-116159 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option |
| CVE-2026-116158 New | IM ImageMagick ImageMagick | 2.5 | Oct 25 | ImageMagick before 7.1.2-33 Memory Leak in magick compare |
| CVE-2026-116157 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading |
| CVE-2026-116156 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option |
| CVE-2026-116155 New | IM ImageMagick ImageMagick | 5.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile |
| CVE-2026-116154 New | IM ImageMagick ImageMagick | 5.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit |
| CVE-2026-116153 New | IM ImageMagick ImageMagick | 2.5 | Oct 25 | ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit |
| CVE-2026-116152 New | IM ImageMagick ImageMagick | 5.3 | Oct 25 | ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path |
| CVE-2026-116151 New | IM ImageMagick ImageMagick | 3.7 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder |
| CVE-2026-116150 New | IM ImageMagick ImageMagick | 3.1 | Oct 25 | ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder |
| CVE-2026-116149 New | IM ImageMagick ImageMagick | 8.1 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images |
| CVE-2026-116148 New | IM ImageMagick ImageMagick | 3.6 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options |
| CVE-2026-116147 New | IM ImageMagick ImageMagick | 3.7 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder |
| CVE-2026-116146 New | IM ImageMagick ImageMagick | 3.7 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder |
| CVE-2026-116145 New | IM ImageMagick ImageMagick | 3.9 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix |
| CVE-2026-116144 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder |
| CVE-2026-116143 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders |
| CVE-2026-116142 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box |
| CVE-2026-116141 New | IM ImageMagick ImageMagick | 5.3 | Oct 25 | ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder |
| CVE-2026-116140 New | IM ImageMagick ImageMagick | 3.3 | Oct 25 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing |
| CVE-2026-109964 | IM ImageMagick ImageMagick | 5.6 | Oct 13 | ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder |
| CVE-2026-109282 | IM ImageMagick ImageMagick | 2.5 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders |
| CVE-2026-109281 | IM ImageMagick ImageMagick | 4.4 | Oct 12 | ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option |
| CVE-2026-109280 | IM ImageMagick ImageMagick | 2.5 | Oct 12 | ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option |
| CVE-2026-109279 | IM ImageMagick ImageMagick | 2.5 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access |
| CVE-2026-109278 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation |
| CVE-2026-109277 | IM ImageMagick ImageMagick | 3.3 | Oct 12 | ImageMagick before 7.1.2-32 Policy Bypass via -script Operation |
| CVE-2026-109276 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder |
| CVE-2026-109275 | IM ImageMagick ImageMagick | 4.8 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder |
| CVE-2026-109274 | IM ImageMagick ImageMagick | 2.5 | Oct 12 | ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script |
| CVE-2026-109273 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder |
| CVE-2026-109272 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder |
| CVE-2026-109271 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder |
| CVE-2026-109270 | IM ImageMagick ImageMagick | 3.3 | Oct 12 | ImageMagick before 7.1.2-32 Memory Leak via -process Option |
| CVE-2026-109269 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder |
| CVE-2026-109268 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000 |
| CVE-2026-109267 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder |
| CVE-2026-109266 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via CIP Encoder |
| CVE-2026-109265 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile |
| CVE-2026-109264 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder |
| CVE-2026-109263 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder |
| CVE-2026-109262 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder |
| CVE-2026-109261 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder |
| CVE-2026-109260 | IM ImageMagick ImageMagick | 3.7 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder |
| CVE-2026-109259 | IM ImageMagick ImageMagick | 5.3 | Oct 12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder |
| CVE-2026-109258 | IM ImageMagick ImageMagick | 2.5 | Oct 12 | ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation |
| CVE-2026-105081 | IM ImageMagick ImageMagick | 3.6 | Oct 12 | ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName |
| CVE-2026-108693 | IM ImageMagick ImageMagick | 7.0 | Oct 11 | ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate |
| CVE-2026-107210 | IM ImageMagick ImageMagick | 5.3 | Oct 7 | ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data |
| CVE-2026-107209 | IM ImageMagick ImageMagick | 7.5 | Oct 7 | ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support |
| CVE-2026-107208 | IM ImageMagick ImageMagick | 5.3 | Oct 7 | ImageMagick: Denial of service with crafted XMP profile |
| CVE-2026-106580 | IM ImageMagick ImageMagick | 8.2 | Oct 7 | ImageMagick: Policy Bypass in CUT encoder |
| CVE-2026-106579 | IM ImageMagick ImageMagick | 7.5 | Oct 7 | ImageMagick: Policy Bypass when using coder as the domain. |
| CVE-2026-106578 | IM ImageMagick ImageMagick | 7.5 | Oct 7 | ImageMagick: Invalid Memory Free in MVG decoder |
| CVE-2026-106577 | IM ImageMagick ImageMagick | 6.5 | Oct 7 | ImageMagick: Code Injection in the postscript coders |
| CVE-2026-106576 | IM ImageMagick ImageMagick | 7.5 | Oct 7 | ImageMagick: Denial of service possible when parsing an XMP profile. |
| CVE-2026-106575 | IM ImageMagick ImageMagick | 5.3 | Oct 7 | ImageMagick: Unclosed file pointer in magick script |
| CVE-2026-106574 | IM ImageMagick ImageMagick | 6.5 | Oct 7 | ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash |
| CVE-2026-106573 | IM ImageMagick ImageMagick | 7.5 | Oct 7 | ImageMagick: Denial of service in MVG decoder |