Vulnerabilities
CVE-2025-53015
ImageMagick has XMP profile write that triggers hang due to unbounded loop
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
CVE-2026-33535
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
GHSA-9r56-3gjq-hqf7
ImageMagick: META reader memory leak in the APP1JPEG input path
GHSA-6p22-q7w5-33pg
ImageMagick has possible memory leak in ASHLAR coder when action fails
CVE-2026-30935
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
CVE-2026-30931
ImageMagick has heap-based buffer overflow in UHDR encoder
CVE-2026-28493
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
CVE-2026-31853
ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder
CVE-2026-32636
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
CVE-2023-1289
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
CVE-2026-30929
ImageMagick has stack buffer overflow in MagnifyImage
CVE-2026-30936
ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage
CVE-2026-30937
ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
CVE-2026-28693
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
CVE-2026-28687
ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
CVE-2026-28690
ImageMagick has stack write buffer overflow in MNG encoder
CVE-2026-25970
ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
CVE-2026-28691
ImageMagick has uninitialized pointer dereference in JBIG decoder
CVE-2026-25968
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
CVE-2026-28686
ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
CVE-2026-28494
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
CVE-2026-25986
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
CVE-2026-26284
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
CVE-2026-25971
ImageMagick: MSL - Stack overflow in ProcessMSLScript
CVE-2026-28688
ImageMagick has heap use-after-free in the MSL encoder
CVE-2026-25982
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
CVE-2026-28692
ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
CVE-2026-28689
ImageMagick has a Path Policy TOCTOU symlink race bypass
CVE-2026-30883
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
CVE-2026-25637
ImageMagick: Possible memory leak in ASHLAR encoder
CVE-2026-25969
Image Magick has a Memory Leak in coders/ashlar.c
CVE-2026-27799
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
CVE-2026-27798
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
GHSA-3q5f-gmjc-38r8
ImageMagick: Memory leak in coders/txt.c without freetype
GHSA-2gq3-ww97-wfjm
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
GHSA-wfx3-6g53-9fgc
ImageMagick: Memory Leak in multiple coders that write raw pixel data
GHSA-gq5v-qf8q-fp77
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
GHSA-3j4x-rwrx-xxj9
mageMagick has a possible use-after-free write in its PDB decoder
GHSA-xpg8-7m6m-jf56
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
GHSA-wgxp-q8xq-wpp9
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
CVE-2026-25984
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
CVE-2026-25796
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
CVE-2026-25576
ImageMagick: Out of bounds read in multiple coders read raw pixel data
CVE-2026-24485
ImageMagick: Infinite loop vulnerability when parsing a PCD file
CVE-2026-25798
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
CVE-2026-25799
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
CVE-2026-25897
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
CVE-2026-24484
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
CVE-2026-25638
ImageMagick has memory leak in msl encoder
CVE-2026-25898
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
CVE-2026-25966
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
CVE-2026-25965
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
CVE-2026-25967
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
CVE-2026-26066
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
CVE-2026-25983
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
CVE-2026-25988
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
CVE-2026-25989
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
CVE-2026-26283
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
CVE-2026-25987
ImageMagick has a heap buffer over-read in its MAP image decoder
CVE-2026-25795
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
CVE-2026-23952
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
CVE-2026-22770
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
GHSA-qp59-x883-77qv
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
Ready to move
Start Securing
Free, no credit card | First findings in minutes