Imagemagick
by ImageMagick
Source repositories
CVEs (819)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-5506 | Hig | 0.51 | 7.8 | 0.02 | Mar 24, 2017 | Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. | ||
| CVE-2014-9835 | Hig | 0.51 | 7.8 | 0.01 | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. | ||
| CVE-2014-9834 | Hig | 0.51 | 7.8 | 0.01 | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. | ||
| CVE-2014-9833 | Hig | 0.51 | 7.8 | 0.01 | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. | ||
| CVE-2014-9832 | Hig | 0.51 | 7.8 | 0.01 | Mar 22, 2017 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. | ||
| CVE-2016-8707 | Hig | 0.51 | 7.8 | 0.04 | Dec 23, 2016 | An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability… | ||
| CVE-2007-4988 | Hig | 0.51 | 7.8 | 0.03 | Sep 24, 2007 | Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow. | ||
| CVE-2025-55154 | Hig | 0.50 | 8.8 | 0.01 | Aug 13, 2025 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has… | ||
| CVE-2019-17547 | Hig | 0.50 | 8.8 | 0.02 | Oct 14, 2019 | In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. | ||
| CVE-2019-17541 | Hig | 0.50 | 8.8 | 0.02 | Oct 14, 2019 | ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. | ||
| CVE-2019-17540 | Hig | 0.50 | 8.8 | 0.02 | Oct 14, 2019 | ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. | ||
| CVE-2026-53461 | Hig | 0.49 | 7.5 | 0.00 | Jun 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash. This issue has been patched in versions… | ||
| CVE-2026-53460 | Hig | 0.49 | 7.5 | 0.00 | Jun 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in… | ||
| CVE-2026-49218 | Hig | 0.49 | 7.5 | 0.00 | Jun 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This… | ||
| CVE-2026-46520 | Hig | 0.49 | 7.5 | 0.00 | Jun 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions… | ||
| CVE-2026-25965 | Hig | 0.49 | 8.6 | 0.01 | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, a policy rule such… | ||
| CVE-2021-40211 | Hig | 0.49 | 7.5 | 0.01 | Aug 22, 2023 | An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. | ||
| CVE-2017-12806 | Hig | 0.49 | 7.5 | 0.03 | May 9, 2019 | In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service. | ||
| CVE-2017-12805 | Hig | 0.49 | 7.5 | 0.03 | May 9, 2019 | In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service. | ||
| CVE-2017-15033 | Hig | 0.49 | 7.5 | 0.02 | Oct 5, 2017 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. |
- risk 0.51cvss 7.8epss 0.02
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.
- risk 0.51cvss 7.8epss 0.01
Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
- risk 0.51cvss 7.8epss 0.01
Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
- risk 0.51cvss 7.8epss 0.01
Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
- risk 0.51cvss 7.8epss 0.01
Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
- risk 0.51cvss 7.8epss 0.04
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability…
- risk 0.51cvss 7.8epss 0.03
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.
- risk 0.50cvss 8.8epss 0.01
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has…
- risk 0.50cvss 8.8epss 0.02
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free.
- risk 0.50cvss 8.8epss 0.02
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
- risk 0.50cvss 8.8epss 0.02
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
- risk 0.49cvss 7.5epss 0.00
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash. This issue has been patched in versions…
- risk 0.49cvss 7.5epss 0.00
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in…
- risk 0.49cvss 7.5epss 0.00
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This…
- risk 0.49cvss 7.5epss 0.00
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions…
- risk 0.49cvss 8.6epss 0.01
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, a policy rule such…
- risk 0.49cvss 7.5epss 0.01
An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
- risk 0.49cvss 7.5epss 0.03
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
- risk 0.49cvss 7.5epss 0.03
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service.
- risk 0.49cvss 7.5epss 0.02
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
Page 7 of 41