Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-61868 ImageMagick before 7.1.2-26 Memory Leak in YUV Decoder CWE-401 3.7 Low 2026-07-15
CVE-2026-61867 ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder CWE-401 2.9 Low 2026-07-15
CVE-2026-61866 ImageMagick before 7.1.2-26 Memory Leak in JNG encoder CWE-401 2.9 Low 2026-07-15
CVE-2026-61865 ImageMagick before 7.1.2-26 Memory Leak in Hough Lines CWE-401 2.9 Low 2026-07-15
CVE-2026-61864 ImageMagick before 7.1.2-26 Memory Leak in Log Colorspace CWE-401 2.9 Low 2026-07-15
CVE-2026-61863 ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder CWE-401 2.9 Low 2026-07-15
CVE-2026-61860 ImageMagick before 7.1.2-26 Use-After-Free via freetype CWE-416 3.7 Low 2026-07-15
CVE-2026-61862 ImageMagick before 7.1.2-26 Information Disclosure via identify CWE-125 2.9 Low 2026-07-15
CVE-2026-61859 ImageMagick before 7.1.2-26 Policy Bypass via script operation CWE-59 3.3 Low 2026-07-15
CVE-2026-61464 ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11 CWE-122 1.8 Low 2026-07-15
CVE-2026-56375 ImageMagick - Memory Leak in ASHLAR Coder Action Failure CWE-401 3.3 Low 2026-07-15
CVE-2026-61870 ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder CWE-401 2.9 Low 2026-07-11
CVE-2026-61861 ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption CWE-416 3.7 Low 2026-07-11
CVE-2026-61858 ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder CWE-59 3.3 Low 2026-07-11
CVE-2026-61857 ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP CWE-252 3.7 Low 2026-07-11
CVE-2026-61465 ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass CWE-770 3.3 Low 2026-07-11
CVE-2026-56372 ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method CWE-122 3.3 Low 2026-07-11
CVE-2026-56373 ImageMagick - Use-After-Free Write in PDB Decoder CWE-416 3.7 Low 2026-07-10
CVE-2026-56366 ImageMagick - Memory Leak in META Reader APP1JPEG Error Path CWE-401 3.3 Low 2026-07-10
CVE-2026-56374 ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter CWE-125 3.3 Low 2026-07-08
CVE-2026-56362 ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization CWE-125 3.3 Low 2026-07-08
CVE-2026-55597 ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments CWE-682 5.5 Medium 2026-07-01
CVE-2026-55595 ImageMagick: Infinite Loop in connected-components when providing invalid arguments CWE-400 4.7 Medium 2026-07-01
CVE-2026-55594 ImageMagick: Stack Overflow in MVG decoder due to missing depth check. CWE-400 5.3 Medium 2026-07-01
CVE-2026-55577 ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder CWE-754 5.9 Medium 2026-07-01
CVE-2026-55510 ImageMagick: Use-After-Free in crafted 8BIM when identifying an image CWE-416 5.5 Medium 2026-07-01
CVE-2026-53467 ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged CWE-908 5.3 Medium 2026-07-01
CVE-2026-53466 ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow CWE-190 6.5 Medium 2026-07-01
CVE-2026-55628 ImageMagick: Policy Bypass in concatenate operation due to missing checks CWE-73 5.5 Medium 2026-07-01
CVE-2026-56377 ImageMagick - Policy Bypass via Incorrect Path Validation CWE-22 3.3 Low 2026-06-30

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.