Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

imagemagick — Vulnerabilities & Security Advisories 167

All 167 CVE vulnerabilities found in imagemagick, with AI-generated Chinese analysis, references, and POCs.

Vendor: ImageMagick

CVE IDTitleCVSSSeverityPublished
CVE-2026-28686 ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer CWE-122 6.8 Medium2026-03-09
CVE-2026-28494 ImageMagick affected by stack corruption through long morphology kernel names or arrays CWE-121 7.1 High2026-03-09
CVE-2026-28493 ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder CWE-190 6.5 Medium2026-03-09
CVE-2026-27799 ImageMagick has a heap Buffer Over-read in its DJVU image format handler CWE-122 4.0 Medium2026-02-25
CVE-2026-27798 ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images CWE-125 4.0 Medium2026-02-25
CVE-2026-26983 ImageMagick: Invalid MSL <map> can result in a use after free CWE-476 5.3 Medium2026-02-24
CVE-2026-26284 ImageMagick has heap overflow in pcd decoder that leads to out of bounds read. CWE-122 6.5 Medium2026-02-24
CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent` CWE-835 6.2 Medium2026-02-24
CVE-2026-26066 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile CWE-400 6.2 Medium2026-02-24
CVE-2026-25989 ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder CWE-190 7.5 High2026-02-24
CVE-2026-25988 ImageMagick's MSL image stack index not refreshed, leading to leaked images. CWE-401 5.3 Medium2026-02-24
CVE-2026-25987 ImageMagick has heap buffer over-read in MAP image decoder CWE-125 5.3 Medium2026-02-24
CVE-2026-25986 ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder CWE-787 5.3 Medium2026-02-24
CVE-2026-25985 Memory allocation with excessive without limits in the internal SVG decoder CWE-770 7.5 High2026-02-24
CVE-2026-25983 ImageMagick has Use After Free in MSLStartElement in "coders/msl.c" CWE-416 5.3 Medium2026-02-24
CVE-2026-25982 ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage) CWE-125 6.5 Medium2026-02-24
CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript CWE-674 6.2 Medium2026-02-24
CVE-2026-25970 ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption CWE-190 5.3 Medium2026-02-24
CVE-2026-25969 ImageMagick has Memory Leak in coders/ashlar.c CWE-401 5.3 Medium2026-02-24
CVE-2026-25968 ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write. CWE-121 7.4 High2026-02-24
CVE-2026-25967 ImageMagick has stack buffer overflow in FTXT reader via oversized integer field CWE-121 7.4 High2026-02-24
CVE-2026-25966 ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access CWE-284 5.9 Medium2026-02-24
CVE-2026-25965 ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy CWE-22 8.6 High2026-02-24
CVE-2026-25898 Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer CWE-125 6.5 Medium2026-02-24
CVE-2026-25897 ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write CWE-122 6.5 Medium2026-02-24
CVE-2026-25799 ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash CWE-369 5.3 Medium2026-02-24
CVE-2026-25798 ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image CWE-476 5.3 Medium2026-02-24
CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders CWE-94 5.7 Medium2026-02-24
CVE-2026-25796 ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths CWE-401 5.3 Medium2026-02-24
CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) CWE-476 5.3 Medium2026-02-24

All 167 known CVE vulnerabilities affecting imagemagick with full Chinese analysis, references, and POCs where available.