Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-46521 ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression CWE-131 5.5 Medium 2026-06-10
CVE-2026-46520 ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions CWE-122 7.5 High 2026-06-10
CVE-2026-45664 ImageMagick: Policy Bypass in MNG coder could CWE-400 5.3 Medium 2026-06-10
CVE-2026-46522 ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion CWE-400 7.5 High 2026-06-10
CVE-2026-45624 ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation. CWE-125 5.1 Medium 2026-06-10
CVE-2026-45359 ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define CWE-125 5.7 Medium 2026-06-10
CVE-2026-45358 ImageMagick: Out-of-Bounds Read of a single byte in meta encoder CWE-125 5.3 Medium 2026-06-10
CVE-2026-42326 ImageMagick: Heap Buffer Over-Read in IPTC encoder CWE-125 5.1 Medium 2026-06-10
CVE-2026-45031 ImageMagick: Policy Bypass in PSD decoder CWE-400 5.3 Medium 2026-06-10
CVE-2026-46523 ImageMagick: Use-After-Free in MSL decoder. CWE-416 6.2 Medium 2026-06-10
CVE-2026-42050 ImageMagick: Stack buffer overflow in XTileImage CWE-121 5.5 Medium 2026-05-11
CVE-2026-40312 ImageMagick: Off-by-One in MSL decoder could result in crash CWE-193 6.2 Medium 2026-04-13
CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values CWE-416 5.5 Medium 2026-04-13
CVE-2026-40310 ImageMagick: Heap out-of-bounds write in JP2 encoder CWE-122 5.5 Medium 2026-04-13
CVE-2026-40183 ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float CWE-122 5.5 Medium 2026-04-13
CVE-2026-40169 ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders CWE-122 6.2 Medium 2026-04-13
CVE-2026-34238 ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds CWE-190 5.1 Medium 2026-04-13
CVE-2026-33908 ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree() CWE-674 7.5 High 2026-04-13
CVE-2026-33905 ImageMagick has an Out-of-Bounds read via -sample operation CWE-125 5.5 Medium 2026-04-13
CVE-2026-33902 ImageMagick: Stack Overflow via Recursive FX Expression Parsing CWE-674 5.5 Medium 2026-04-13
CVE-2026-33901 ImageMagick has a Heap Buffer Overflow via MVG decoder CWE-122 7.5 High 2026-04-13
CVE-2026-33900 ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds CWE-190 5.9 Medium 2026-04-13
CVE-2026-33899 ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML CWE-122 5.3 Medium 2026-04-13
CVE-2026-33536 ImageMagick has an Out-of-bounds Write via InterpretImageFilename CWE-787 5.1 Medium 2026-03-26
CVE-2026-33535 ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction CWE-787 4.0 Medium 2026-03-26
CVE-2026-32636 ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash CWE-787 5.3 Medium 2026-03-18
CVE-2026-32259 ImageMagick has a possible stack buffer overflow in sixel encoder CWE-121 6.7 Medium 2026-03-12
CVE-2026-31853 ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder CWE-122 5.7 Medium 2026-03-11
CVE-2026-30937 ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation CWE-122 6.8 Medium 2026-03-09
CVE-2026-30936 ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage CWE-122 5.5 Medium 2026-03-09

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.