Vulnerabilities
CVE-2026-46557
ImageMagick: Stack overflow in fx operation
CVE-2026-46520
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
CVE-2026-47165
ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
CVE-2026-46693
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
CVE-2026-45624
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
CVE-2026-46521
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
CVE-2026-45664
ImageMagick: Policy Bypass in MNG coder could
CVE-2026-46523
ImageMagick: Use-After-Free in MSL decoder.
CVE-2026-46559
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
CVE-2026-46522
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
CVE-2026-42326
ImageMagick: Heap Buffer Over-Read in IPTC encoder
CVE-2026-45358
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
CVE-2026-45031
ImageMagick: Policy Bypass in PSD decoder
CVE-2026-45359
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
CVE-2026-47166
ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
CVE-2026-46692
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
GHSA-vf33-6r7x-66xx
ImageMagick: Division by Zero in binomial kernel
GHSA-qv2q-c278-pch5
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
GHSA-jqq5-8px3-9m6m
ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
CVE-2025-55004
imagemagick: heap-buffer overflow read in MNG magnification with alpha
CVE-2026-40169
ImageMagick has a heap buffer overflow (WRITE) in the YAML and JSON encoders.
CVE-2025-62594
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
CVE-2026-40183
ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float
CVE-2025-68469
ImageMagick has a heap-buffer-overflow
CVE-2026-40312
ImageMagick has an off-by-one error in MSL decoder could result in crash
CVE-2025-53015
ImageMagick has XMP profile write that triggers hang due to unbounded loop
CVE-2026-23874
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
CVE-2026-33899
ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.
CVE-2026-33902
ImageMagick has a Stack Overflow via Recursive FX Expression Parsing
CVE-2026-33905
ImageMagick has an out-of-bounds read in sample operation
CVE-2026-33901
ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder
CVE-2026-33908
ImageMagick has a Stack Overflow in DestroyXMLTree()
CVE-2026-40311
ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.
CVE-2026-40310
ImageMagick has a heap out-of-bounds write in JP2 encoder
GHSA-w54j-7wpm-crhj
ImageMagick has a heap-buffer-overflow in FTXT encoder
GHSA-pmpg-6pww-fg6q
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts
GHSA-x928-4434-crqj
ImageMagick has a memory leak in PNG encoder when writing a MNG image
GHSA-q8h3-jv9v-57qx
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing
GHSA-8vfj-q2cp-5m5j
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value
GHSA-98cp-rj9f-6v5g
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
CVE-2026-33536
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
CVE-2026-33535
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
GHSA-9r56-3gjq-hqf7
ImageMagick: META reader memory leak in the APP1JPEG input path
GHSA-6p22-q7w5-33pg
ImageMagick has possible memory leak in ASHLAR coder when action fails
CVE-2026-30935
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
CVE-2026-30931
ImageMagick has heap-based buffer overflow in UHDR encoder
CVE-2026-28493
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
CVE-2026-31853
ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder
CVE-2026-32636
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
CVE-2023-1289
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
CVE-2026-30929
ImageMagick has stack buffer overflow in MagnifyImage
CVE-2026-30936
ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage
CVE-2026-30937
ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
CVE-2026-28693
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
CVE-2026-28687
ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
CVE-2026-28690
ImageMagick has stack write buffer overflow in MNG encoder
CVE-2026-25970
ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
CVE-2026-28691
ImageMagick has uninitialized pointer dereference in JBIG decoder
CVE-2026-25968
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
CVE-2026-28686
ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
CVE-2026-28494
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
CVE-2026-25986
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
CVE-2026-26284
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
CVE-2026-25971
ImageMagick: MSL - Stack overflow in ProcessMSLScript
CVE-2026-28688
ImageMagick has heap use-after-free in the MSL encoder
CVE-2026-25982
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
CVE-2026-28692
ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
CVE-2026-28689
ImageMagick has a Path Policy TOCTOU symlink race bypass
CVE-2026-30883
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
CVE-2026-25637
ImageMagick: Possible memory leak in ASHLAR encoder
CVE-2026-25969
Image Magick has a Memory Leak in coders/ashlar.c
CVE-2026-27799
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
CVE-2026-27798
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
GHSA-3q5f-gmjc-38r8
ImageMagick: Memory leak in coders/txt.c without freetype
GHSA-2gq3-ww97-wfjm
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
GHSA-wfx3-6g53-9fgc
ImageMagick: Memory Leak in multiple coders that write raw pixel data
GHSA-gq5v-qf8q-fp77
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
GHSA-3j4x-rwrx-xxj9
mageMagick has a possible use-after-free write in its PDB decoder
GHSA-xpg8-7m6m-jf56
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
GHSA-wgxp-q8xq-wpp9
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
CVE-2026-25984
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
CVE-2026-24481
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
CVE-2026-25796
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
CVE-2026-24485
ImageMagick: Infinite loop vulnerability when parsing a PCD file
CVE-2026-25798
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
CVE-2026-25799
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
CVE-2026-25897
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
CVE-2026-24484
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
CVE-2026-25638
ImageMagick has memory leak in msl encoder
CVE-2026-25898
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
CVE-2026-25966
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
CVE-2026-25965
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
CVE-2026-25967
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
CVE-2026-26983
ImageMagick: Invalid MSL <map> can result in a use after free
CVE-2026-26066
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
CVE-2026-25983
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
CVE-2026-25988
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
Ready to move
Start Securing
Free, no credit card | First findings in minutes