Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate CWE-122 3.3 Low 2026-10-25
CVE-2026-116159 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option CWE-401 3.3 Low 2026-10-25
CVE-2026-116157 ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading CWE-401 3.3 Low 2026-10-25
CVE-2026-116158 ImageMagick before 7.1.2-33 Memory Leak in magick compare CWE-401 2.5 Low 2026-10-25
CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option CWE-401 3.3 Low 2026-10-25
CVE-2026-116155 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile CWE-401 5.3 Medium 2026-10-25
CVE-2026-116154 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit CWE-401 5.3 Medium 2026-10-25
CVE-2026-116153 ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit CWE-190 2.5 Low 2026-10-25
CVE-2026-116151 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder CWE-401 3.7 Low 2026-10-25
CVE-2026-116152 ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path CWE-401 5.3 Medium 2026-10-25
CVE-2026-116150 ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder CWE-401 3.1 Low 2026-10-25
CVE-2026-116148 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options CWE-79 3.6 Low 2026-10-25
CVE-2026-116149 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images CWE-121 8.1 High 2026-10-25
CVE-2026-116147 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder CWE-476 3.7 Low 2026-10-25
CVE-2026-116145 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix CWE-693 3.9 Low 2026-10-25
CVE-2026-116146 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder CWE-401 3.7 Low 2026-10-25
CVE-2026-116144 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder CWE-674 3.3 Low 2026-10-25
CVE-2026-116142 ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box CWE-125 3.3 Low 2026-10-25
CVE-2026-116143 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders CWE-770 3.3 Low 2026-10-25
CVE-2026-116141 ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder CWE-400 5.3 Medium 2026-10-25
CVE-2026-116140 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing CWE-863 3.3 Low 2026-10-25
CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder CWE-124 5.6 Medium 2026-10-13
CVE-2026-109282 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders CWE-843 2.5 Low 2026-10-12
CVE-2026-109281 ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option CWE-125 4.4 Medium 2026-10-12
CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option CWE-476 2.5 Low 2026-10-12
CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access CWE-362 2.5 Low 2026-10-12
CVE-2026-109278 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation CWE-401 3.7 Low 2026-10-12
CVE-2026-109277 ImageMagick before 7.1.2-32 Policy Bypass via -script Operation CWE-404 3.3 Low 2026-10-12
CVE-2026-109276 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder CWE-459 5.3 Medium 2026-10-12
CVE-2026-109275 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder CWE-74 4.8 Medium 2026-10-12

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.