Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-56369 ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage CWE-323 3.7 Low 2026-06-30
CVE-2026-56365 ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing CWE-401 3.7 Low 2026-06-30
CVE-2026-56364 ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML CWE-401 1.9 Low 2026-06-30
CVE-2026-56363 ImageMagick - Division by Zero in Binomial Kernel Processing CWE-190 3.3 Low 2026-06-30
CVE-2026-56361 ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing CWE-125 3.3 Low 2026-06-30
CVE-2026-56370 ImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact CWE-125 3.3 Low 2026-06-24
CVE-2026-56368 ImageMagick - Memory Leak in Raw Pixel Data Coders CWE-401 3.7 Low 2026-06-24
CVE-2026-56376 ImageMagick - Heap Use-After-Free in Meta Coder CWE-416 3.7 Low 2026-06-23
CVE-2026-56379 ImageMagick - Command Injection via SVG Decoder CWE-116 8.1 High 2026-06-23
CVE-2026-56371 ImageMagick - Memory Leak in TXT File Processing via Texture Attribute CWE-401 5.3 Medium 2026-06-23
CVE-2026-56378 ImageMagick - Heap Out-of-Bounds Read in PCD Decoder CWE-125 3.7 Low 2026-06-21
CVE-2026-56367 ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding CWE-125 3.7 Low 2026-06-21
CVE-2026-53465 ImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame image CWE-122 6.2 Medium 2026-06-10
CVE-2026-53464 ImageMagick: Memory Leak in wand option parser when providing invalid arguments CWE-401 4.0 Medium 2026-06-10
CVE-2026-53463 ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments CWE-476 4.3 Medium 2026-06-10
CVE-2026-53462 ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails CWE-416 5.9 Medium 2026-06-10
CVE-2026-53461 ImageMagick: Out-of-bounds write in ICON decoder due to incorrect loop CWE-787 7.5 High 2026-06-10
CVE-2026-53460 ImageMagick: Policy Bypass can trigger out-of-Memory condition CWE-770 7.5 High 2026-06-10
CVE-2026-49219 ImageMagick: Policy Bypass can read disallowed files CWE-22 5.5 Medium 2026-06-10
CVE-2026-49218 ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions CWE-20 7.5 High 2026-06-10
CVE-2026-48994 ImageMagick: Heap Buffer Over-Write in MAT decoder on 32-bit systems CWE-122 5.9 Medium 2026-06-10
CVE-2026-48734 ImageMagick: Stack Overflow in MVG decoder CWE-674 5.5 Medium 2026-06-10
CVE-2026-48733 ImageMagick: Infinite Loop in subimage-search with crafted image CWE-835 4.7 Medium 2026-06-10
CVE-2026-48724 ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth dithering CWE-787 5.5 Medium 2026-06-10
CVE-2026-47166 ImageMagick: Heap Buffer Over-Read in distributed pixel cache server CWE-125 5.7 Medium 2026-06-10
CVE-2026-47165 ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model CWE-200 4.1 Medium 2026-06-10
CVE-2026-46693 ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking CWE-362 4.1 Medium 2026-06-10
CVE-2026-46692 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server CWE-122 4.1 Medium 2026-06-10
CVE-2026-46559 ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder CWE-193 4.0 Medium 2026-06-10
CVE-2026-46557 ImageMagick: Stack overflow in fx operation CWE-674 6.2 Medium 2026-06-10

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.