Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-30935 ImageMagick has a heap Buffer Over-Read in BilateralBlurImage CWE-125 4.4 Medium 2026-03-09
CVE-2026-30931 ImageMagick has a heap-based buffer overflow in UHDR encoder CWE-122 6.8 Medium 2026-03-09
CVE-2026-30929 ImageMagick has a stack buffer overflow in MagnifyImage CWE-121 7.7 High 2026-03-09
CVE-2026-30883 ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder CWE-119 5.7 Medium 2026-03-09
CVE-2026-28693 ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write CWE-125 8.1 High 2026-03-09
CVE-2026-28692 ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder CWE-125 4.8 Medium 2026-03-09
CVE-2026-28691 ImageMagick has an uninitialized pointer dereference in JBIG decoder CWE-252 7.5 High 2026-03-09
CVE-2026-28690 ImageMagick has a stack write buffer overflow in MNG encoder CWE-121 6.9 Medium 2026-03-09
CVE-2026-28689 ImageMagick has a Path Policy TOCTOU symlink race bypass CWE-59 6.3 Medium 2026-03-09
CVE-2026-28688 ImageMagick has a heap use-after-free in the MSL encoder CWE-416 4.0 Medium 2026-03-09
CVE-2026-28687 ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder CWE-416 5.3 Medium 2026-03-09
CVE-2026-28686 ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer CWE-122 6.8 Medium 2026-03-09
CVE-2026-28494 ImageMagick affected by stack corruption through long morphology kernel names or arrays CWE-121 7.1 High 2026-03-09
CVE-2026-28493 ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder CWE-190 6.5 Medium 2026-03-09
CVE-2026-27799 ImageMagick has a heap Buffer Over-read in its DJVU image format handler CWE-122 4.0 Medium 2026-02-25
CVE-2026-27798 ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images CWE-125 4.0 Medium 2026-02-25
CVE-2026-26983 ImageMagick: Invalid MSL <map> can result in a use after free CWE-476 5.3 Medium 2026-02-24
CVE-2026-26284 ImageMagick has heap overflow in pcd decoder that leads to out of bounds read. CWE-122 6.5 Medium 2026-02-24
CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent` CWE-835 6.2 Medium 2026-02-24
CVE-2026-26066 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile CWE-400 6.2 Medium 2026-02-24
CVE-2026-25989 ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder CWE-190 7.5 High 2026-02-24
CVE-2026-25988 ImageMagick's MSL image stack index not refreshed, leading to leaked images. CWE-401 5.3 Medium 2026-02-24
CVE-2026-25987 ImageMagick has heap buffer over-read in MAP image decoder CWE-125 5.3 Medium 2026-02-24
CVE-2026-25986 ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder CWE-787 5.3 Medium 2026-02-24
CVE-2026-25985 Memory allocation with excessive without limits in the internal SVG decoder CWE-770 7.5 High 2026-02-24
CVE-2026-25983 ImageMagick has Use After Free in MSLStartElement in "coders/msl.c" CWE-416 5.3 Medium 2026-02-24
CVE-2026-25982 ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage) CWE-125 6.5 Medium 2026-02-24
CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript CWE-674 6.2 Medium 2026-02-24
CVE-2026-25970 ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption CWE-190 5.3 Medium 2026-02-24
CVE-2026-25969 ImageMagick has Memory Leak in coders/ashlar.c CWE-401 5.3 Medium 2026-02-24

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.