Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check. CWE-674 5.3 Medium 2026-10-07
CVE-2026-106571 ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash CWE-190 5.1 Medium 2026-10-07
CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server CWE-400 4.3 Medium 2026-10-07
CVE-2026-106569 ImageMagick: Denial of service in ASE decoder because of missing security checks CWE-770 5.3 Medium 2026-10-07
CVE-2026-106568 ImageMagick: Infinite Loop when reading a crafted XMP profile CWE-835 5.3 Medium 2026-10-07
CVE-2026-106567 ImageMagick: Infinite Loop in PSD decoder on 32-bit builds CWE-196 5.9 Medium 2026-10-07
CVE-2026-106566 ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check CWE-61 4.0 Medium 2026-10-07
CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images. CWE-400 5.9 Medium 2026-10-07
CVE-2026-106564 ImageMagick: Heap Buffer Over-Write in EXR decoder CWE-122 5.3 Medium 2026-10-07
CVE-2026-105083 ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE CWE-693 3.9 Low 2026-10-03
CVE-2026-102635 ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder CWE-908 3.7 Low 2026-09-29
CVE-2026-93590 ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder CWE-400 3.7 Low 2026-09-18
CVE-2026-93589 ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder CWE-369 3.7 Low 2026-09-18
CVE-2026-93588 ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM CWE-476 3.1 Low 2026-09-18
CVE-2026-93587 ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder CWE-400 3.3 Low 2026-09-18
CVE-2026-93586 ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob CWE-416 2.9 Low 2026-09-18
CVE-2026-86425 ImageMagick before 7.1.2-30 Heap-use-after-free via Layer CWE-416 3.3 Low 2026-09-07
CVE-2026-86424 ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race CWE-59 2.5 Low 2026-09-07
CVE-2026-86423 ImageMagick before 7.1.2-30 Heap-use-after-free via GetList CWE-416 3.3 Low 2026-09-07
CVE-2026-86421 ImageMagick before 7.1.2-30 Memory Leak via MSL decoder CWE-400 3.7 Low 2026-09-07
CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race CWE-59 3.3 Low 2026-09-07
CVE-2026-86420 ImageMagick before 7.1.2-30 Denial of Service Memory Budget CWE-400 3.7 Low 2026-09-07
CVE-2026-62946 ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds CWE-190 5.1 Medium 2026-07-30
CVE-2026-62363 ImageMagick: Heap Buffer Over-Write in fx operation CWE-787 5.0 Medium 2026-07-30
CVE-2026-62343 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided CWE-190 4.7 Medium 2026-07-29
CVE-2026-64685 ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check CWE-125 5.3 Medium 2026-07-29
CVE-2026-66011 ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options CWE-401 3.3 Low 2026-07-25
CVE-2026-61871 ImageMagick before 7.1.2-26 Memory Leak in ICON decoder CWE-401 3.7 Low 2026-07-15
CVE-2026-61872 ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder CWE-401 2.5 Low 2026-07-15
CVE-2026-61869 ImageMagick before 7.1.2-26 Memory Leak in MIFF Encoder CWE-401 2.9 Low 2026-07-15

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.