Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ImageMagick — Vulnerabilities & Security Advisories 328

All 328 CVE vulnerabilities found in ImageMagick, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumerations affecting ImageMagick, the widely used open-source image processing library developed by ImageMagick Studio LLC. It aggregates known security vulnerabilities and configuration flaws that have been disclosed, analyzed, and tracked within the public cybersecurity landscape. The content covers reported incidents and patches released from the software’s inception through the most recent updates, ensuring a comprehensive historical view of its security posture. Here, you can track vendor advisories to stay informed about critical updates and remediation steps issued by the ImageMagick team. You may also explore how specific weakness classes, such as buffer overflows or path traversal issues, manifest within this particular codebase, providing context for both developers and security auditors. Additionally, the page serves as a reference for looking up the product’s vulnerability history, allowing users to assess long-term stability and the effectiveness of past security interventions. This resource is designed for security professionals, system administrators, and developers who require detailed insights into the risk profile of ImageMagick. By consolidating diverse sources of information, including CVE entries and vendor statements, it offers a centralized view for evaluating exposure and prioritizing mitigation efforts. Understanding these patterns helps in hardening deployment environments and improving code review processes to prevent similar issues in future versions.

Vendor: ImageMagick

CVE ID Title CVSS Severity Published
CVE-2026-25968 ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write. CWE-121 7.4 High 2026-02-24
CVE-2026-25967 ImageMagick has stack buffer overflow in FTXT reader via oversized integer field CWE-121 7.4 High 2026-02-24
CVE-2026-25966 ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access CWE-284 5.9 Medium 2026-02-24
CVE-2026-25965 ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy CWE-22 8.6 High 2026-02-24
CVE-2026-25898 Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer CWE-125 6.5 Medium 2026-02-24
CVE-2026-25897 ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write CWE-122 6.5 Medium 2026-02-24
CVE-2026-25799 ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash CWE-369 5.3 Medium 2026-02-24
CVE-2026-25798 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image CWE-476 5.3 Medium 2026-02-24
CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders CWE-94 5.7 Medium 2026-02-24
CVE-2026-25796 ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths CWE-401 5.3 Medium 2026-02-24
CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) CWE-476 5.3 Medium 2026-02-24
CVE-2026-25794 ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions CWE-122 8.2 High 2026-02-24
CVE-2026-25638 ImageMagick has memory leak in msl encoder CWE-401 5.3 Medium 2026-02-24
CVE-2026-25637 ImageMagick: Possible memory leak in ASHLAR encoder CWE-401 5.3 Medium 2026-02-24
CVE-2026-25576 ImageMagick: Out of bounds read in multiple coders read raw pixel data CWE-122 5.1 Medium 2026-02-24
CVE-2026-24485 ImageMagick: Infinite loop vulnerability when parsing a PCD file CWE-400 7.5 High 2026-02-24
CVE-2026-24484 ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS CWE-400 5.3 Medium 2026-02-24
CVE-2026-24481 ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression CWE-125 7.5 High 2026-02-24
CVE-2026-23952 ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load CWE-476 6.5 Medium 2026-01-22
CVE-2026-23876 Heap buffer overflow with attacker-controlled data in XBM parser CWE-122 8.1 High 2026-01-20
CVE-2026-23874 ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript CWE-835 5.5 Medium 2026-01-20
CVE-2026-22770 ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails CWE-763 6.5 Medium 2026-01-20
CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow. CWE-190 5.3 Medium 2025-12-30
CVE-2025-68950 Magick's failure to limit MVG mutual references forming a loop CWE-674 4.0 Medium 2025-12-30
CVE-2025-68618 Magick's failure to limit the depth of SVG file reads caused a DoS attack. CWE-674 5.3 Medium 2025-12-30
CVE-2025-68469 ImageMagick vulnerable to heap-buffer-overflow CWE-122 6.5AI Medium AI 2025-12-18
CVE-2025-66628 ImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only) CWE-125 7.5 High 2025-12-10
CVE-2025-65955 ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family CWE-415 4.9 Medium 2025-12-02
CVE-2025-62594 ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) CWE-119 4.7 Medium 2025-10-27
CVE-2025-62171 ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems CWE-190 5.9 Medium 2025-10-17

All 328 known CVE vulnerabilities affecting ImageMagick with full Chinese analysis, references, and POCs where available.