Browse CVEs

MEDIUM 5.3 CVE-2026-64685 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does no… Imagemagick 7.1.2-27+ Fix from $1,6002026-07-30 MEDIUM 5.0 CVE-2026-62363 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-writ… Imagemagick 7.1.2-27+ Fix from $1,6002026-07-30 HIGH 7.5 CVE-2026-61866 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory le… Imagemagick 7.1.2-26+ Fix from $1,9502026-07-15 HIGH 7.5 CVE-2026-61863 ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-15 HIGH 7.5 CVE-2026-61861 ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can tri… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-11 HIGH 7.5 CVE-2026-61870 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation f… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-11 MEDIUM 5.3 CVE-2026-61858 ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attac… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-11 HIGH 7.5 CVE-2026-61857 ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft … Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,9502026-07-11 MEDIUM 6.5 CVE-2026-61465 ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An a… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-11 CRITICAL 9.1 CVE-2026-56372 ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory… Imagemagick 7.1.2-19+ Fix from $2,3002026-07-11 MEDIUM 6.5 CVE-2026-56366 ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this … Imagemagick 6.9.13-43 / 7.1.2-18+ Fix from $1,6002026-07-10 MEDIUM 5.3 CVE-2026-56373 ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attack… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,6002026-07-10 HIGH 7.1 CVE-2026-56374 ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format… Imagemagick 7.1.2-19+ Fix from $1,9502026-07-08 HIGH 8.1 CVE-2026-56362 ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metad… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-07-08 MEDIUM 5.5 CVE-2026-55597 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of ar… Imagemagick 7.1.2-26+ Fix from $1,6002026-07-01 MEDIUM 5.3 CVE-2026-55594 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing de… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-01 MEDIUM 6.5 CVE-2026-53466 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer o… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-01 MEDIUM 5.9 CVE-2026-55577 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffe… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-01 MEDIUM 5.5 CVE-2026-55510 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when identif… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-01 MEDIUM 5.3 CVE-2026-53467 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG deco… Imagemagick 6.9.13-51 / 7.1.2-26+ Fix from $1,6002026-07-01 HIGH 7.1 CVE-2026-56361 ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger hea… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,9502026-06-30 MEDIUM 5.3 CVE-2026-56365 ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failur… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,6002026-06-30 HIGH 7.8 CVE-2026-56370 ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifac… Imagemagick 6.9.13-44 / 7.1.2-19+ Fix from $1,9502026-06-24 HIGH 7.5 CVE-2026-56368 ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properl… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-06-24 HIGH 8.1 CVE-2026-56379 ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-06-23 MEDIUM 5.3 CVE-2026-56371 ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture objec… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,6002026-06-23 CRITICAL 9.1 CVE-2026-56367 ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coder… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $2,3002026-06-21 HIGH 8.2 CVE-2026-56378 ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,9502026-06-21 HIGH 7.5 CVE-2026-53460 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing ch… Imagemagick 6.9.13-50 / 7.1.2-25+ Fix from $1,9502026-06-10 HIGH 7.5 CVE-2026-53461 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect… Imagemagick 6.9.13-50 / 7.1.2-25+ Fix from $1,9502026-06-10