Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-109273 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder CWE-908 5.3 Medium 2026-10-12
CVE-2026-109274 ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script CWE-59 2.5 Low 2026-10-12
CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder CWE-476 3.7 Low 2026-10-12
CVE-2026-109271 ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder CWE-415 3.7 Low 2026-10-12
CVE-2026-109270 ImageMagick before 7.1.2-32 Memory Leak via -process Option CWE-401 3.3 Low 2026-10-12
CVE-2026-109269 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder CWE-125 5.3 Medium 2026-10-12
CVE-2026-109268 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000 CWE-416 3.7 Low 2026-10-12
CVE-2026-109267 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder CWE-674 5.3 Medium 2026-10-12
CVE-2026-109266 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via CIP Encoder CWE-79 5.3 Medium 2026-10-12
CVE-2026-109265 ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile CWE-125 5.3 Medium 2026-10-12
CVE-2026-109263 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder CWE-401 3.7 Low 2026-10-12
CVE-2026-109264 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder CWE-674 3.7 Low 2026-10-12
CVE-2026-109262 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder CWE-401 5.3 Medium 2026-10-12
CVE-2026-109260 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder CWE-401 3.7 Low 2026-10-12
CVE-2026-109261 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder CWE-401 3.7 Low 2026-10-12
CVE-2026-109259 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder CWE-200 5.3 Medium 2026-10-12
CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation CWE-476 2.5 Low 2026-10-12
CVE-2026-105081 ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName CWE-59 3.6 Low 2026-10-12
CVE-2026-108693 ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate CWE-427 7.0 High 2026-10-11
CVE-2026-107210 ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data CWE-409 5.3 Medium 2026-10-07
CVE-2026-107209 ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support CWE-415 5.9 Medium 2026-10-07
CVE-2026-107208 ImageMagick: Denial of service with crafted XMP profile CWE-400 5.3 Medium 2026-10-07
CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder CWE-284 4.0 Medium 2026-10-07
CVE-2026-106579 ImageMagick: Policy Bypass when using coder as the domain. CWE-551 6.2 Medium 2026-10-07
CVE-2026-106578 ImageMagick: Invalid Memory Free in MVG decoder CWE-590 5.9 Medium 2026-10-07
CVE-2026-106577 ImageMagick: Code Injection in the postscript coders CWE-94 5.3 Medium 2026-10-07
CVE-2026-106576 ImageMagick: Denial of service possible when parsing an XMP profile. CWE-400 5.3 Medium 2026-10-07
CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script CWE-775 5.3 Medium 2026-10-07
CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash CWE-122 5.3 Medium 2026-10-07
CVE-2026-106573 ImageMagick: Denial of service in MVG decoder CWE-400 5.3 Medium 2026-10-07

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.