CVE Tools

Imagemagick

902 CVEs tracked. 3 of them are in CISA KEV.

This hub aggregates every CVE we track for Imagemagick, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Imagemagick CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Imagemagick CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-042
2025-050
2025-060
2025-074
2025-087
2025-091
2025-102
2025-110
2025-126
2026-014
2026-0234
2026-0321
2026-0412
2026-051
2026-0641
2026-0737
2026-080
2026-0912
2026-1072
2026-111

Severity

How the 902 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical404%
  • High21324%
  • Medium53359%
  • Low11613%

Latest CVEs

The 15 most recently published vulnerabilities affecting Imagemagick.

  1. CVE-2026-123273ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder6.5
  2. CVE-2026-119124ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option3.3
  3. CVE-2026-119123ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder3.7
  4. CVE-2026-116160ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate3.3
  5. CVE-2026-116159ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option3.3
  6. CVE-2026-116158ImageMagick before 7.1.2-33 Memory Leak in magick compare2.5
  7. CVE-2026-116157ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading3.3
  8. CVE-2026-116155ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile5.3
  9. CVE-2026-116156ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option3.3
  10. CVE-2026-116153ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit2.5
  11. CVE-2026-116154ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit5.3
  12. CVE-2026-116152ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path5.3
  13. CVE-2026-116150ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder3.1
  14. CVE-2026-116151ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder3.7
  15. CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images8.1

Product grouping is registry-driven, with AI assist and human review. How it works