IImageMagick

Products

Exploited and recent CVEs

• CVE-2026-123273 Medium 6.5 ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder 0.3%
• CVE-2026-119124 Low 3.3 ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option 0.1%
• CVE-2026-119123 Low 3.7 ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder 0.4%
• CVE-2026-116160 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate 0.1%
• CVE-2026-116159 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option 0.1%
• CVE-2026-116158 Low 2.5 ImageMagick before 7.1.2-33 Memory Leak in magick compare 0.1%
• CVE-2026-116157 Low 3.3 ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading 0.1%
• CVE-2026-116156 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option 0.1%
• CVE-2026-116155 Medium 5.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile 0.3%
• CVE-2026-116154 Medium 5.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit 0.3%
• CVE-2026-116153 Low 2.5 ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit 0.1%
• CVE-2026-116152 Medium 5.3 ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path 0.3%
• CVE-2026-116151 Low 3.7 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder 0.3%
• CVE-2026-116150 Low 3.1 ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder 0.2%
• CVE-2026-116149 High 8.1 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images 0.4%
• CVE-2026-116148 Low 3.6 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options 0.1%
• CVE-2026-116147 Low 3.7 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder 0.3%
• CVE-2026-116146 Low 3.7 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder 0.3%
• CVE-2026-116145 Low 3.9 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix 0.1%
• CVE-2026-116144 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder 0.1%
• CVE-2026-116143 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders 0.1%
• CVE-2026-116142 Low 3.3 ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box 0.1%
• CVE-2026-116141 Medium 5.3 ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder 0.4%
• CVE-2026-116140 Low 3.3 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing 0.1%
• CVE-2026-109964 Medium 5.6 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder 0.3%
• CVE-2026-109282 Low 2.5 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders 0.1%
• CVE-2026-109281 Medium 4.4 ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option 0.1%
• CVE-2026-109280 Low 2.5 ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option 0.1%
• CVE-2026-109279 Low 2.5 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access <0.1%
• CVE-2026-109278 Low 3.7 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation 0.4%