HIGH8.6CVE-2026-25965ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy from 0, < 14.10.3
HIGH8.2CVE-2026-25794ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions from 0, < 14.10.3
HIGH8.1CVE-2026-28693ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write from 0, < 14.10.4
HIGH7.7ImageMagick has stack buffer overflow in MagnifyImage
from 0, < 14.10.4
HIGH7.5ImageMagick has uninitialized pointer dereference in JBIG decoder
from 0, < 14.10.4
HIGH7.5ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
from 0, < 14.10.3
HIGH7.5ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
from 0, < 14.10.3
HIGH7.5ImageMagick: Infinite loop vulnerability when parsing a PCD file
from 0, < 14.10.3
HIGH7.5ImageMagick has XMP profile write that triggers hang due to unbounded loop
from 0, < 14.7.0
HIGH7.4ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
from 0, < 14.10.3
HIGH7.4ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
from 0, < 14.10.3
HIGH7.1ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
from 0, < 14.10.4
MEDIUM6.9ImageMagick has stack write buffer overflow in MNG encoder
from 0, < 14.10.4
MEDIUM6.8ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
from 0, < 14.10.4
MEDIUM6.8ImageMagick has heap-based buffer overflow in UHDR encoder
from 0, < 14.10.4
MEDIUM6.8ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
from 0, < 14.10.4
MEDIUM6.5imagemagick - security update
from 0, < 14.10.4
MEDIUM6.5ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
from 0, < 14.10.3
MEDIUM6.5ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
from 0, < 14.10.3
MEDIUM6.5ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
from 0, < 14.10.3
MEDIUM6.5ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
from 0, < 14.10.3
MEDIUM6.5ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
from 0, < 14.10.2
MEDIUM6.5ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
from 0, < 14.10.2
MEDIUM6.3ImageMagick has a Path Policy TOCTOU symlink race bypass
from 0, < 14.10.4
MEDIUM6.2ImageMagick: MSL - Stack overflow in ProcessMSLScript
from 0, < 14.10.3
MEDIUM6.2ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
from 0, < 14.10.3
MEDIUM6.2ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
from 0, < 14.10.3
MEDIUM5.9ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
from 0, < 14.10.3
MEDIUM5.7ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder
from 0, < 14.10.4
MEDIUM5.7ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
from 0, < 14.10.4
MEDIUM5.7ImageMagick: Code Injection via PostScript header in ps coders
from 0, < 14.10.3
MEDIUM5.5imagemagick - security update
from 0, < 13.0.0
MEDIUM5.5ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage
from 0, < 14.10.4
MEDIUM5.3ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
from 0, < 14.11.0
MEDIUM5.3ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
from 0, < 14.10.4
MEDIUM5.3ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
from 0, < 14.10.3
MEDIUM5.3ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
from 0, < 14.10.3
MEDIUM5.3ImageMagick: Invalid MSL <map> can result in a use after free
from 0, < 14.10.3
MEDIUM5.3ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
from 0, < 14.10.3
MEDIUM5.3ImageMagick has a heap buffer over-read in its MAP image decoder
from 0, < 14.10.3
MEDIUM5.3ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
from 0, < 14.10.3
MEDIUM5.3Image Magick has a Memory Leak in coders/ashlar.c
from 0, < 14.10.3
MEDIUM5.3ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
from 0, < 14.10.3
MEDIUM5.3ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
from 0, < 14.10.3
MEDIUM5.3ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
from 0, < 14.10.3
MEDIUM5.3ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
from 0, < 14.10.3
MEDIUM5.3ImageMagick has memory leak in msl encoder
from 0, < 14.10.3
MEDIUM5.3ImageMagick: Possible memory leak in ASHLAR encoder
from 0, < 14.10.3
MEDIUM5.3ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
from 0, < 14.10.3
MEDIUM5.1ImageMagick has an Out-of-bounds Write via InterpretImageFilename
from 0, < 14.11.1
MEDIUM5.1ImageMagick: Out of bounds read in multiple coders read raw pixel data
from 0, < 14.10.3
MEDIUM4.8ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
from 0, < 14.10.4
MEDIUM4.4ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
from 0, < 14.10.4
MEDIUM4.0ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
from 0, < 14.11.1
MEDIUM4.0ImageMagick has heap use-after-free in the MSL encoder
from 0, < 14.10.4
MEDIUM4.0ImageMagick has a heap Buffer Over-read in its DJVU image format handler
from 0, < 14.10.3
MEDIUM4.0ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
from 0, < 14.10.3
LOW3.7ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
from 0, < 14.10.3
LOW3.3ImageMagick has possible memory leak in ASHLAR coder when action fails
from 0, < 14.11.1