# ImageMagick.

Every CVE that names ImageMagick among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder](https://agentprime.io/advisories/CVE-2026-123273.md)
  `CVE-2026-123273` · CVE record: ImageMagick ImageMagick · CVSS 7.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option](https://agentprime.io/advisories/CVE-2026-119124.md)
  `CVE-2026-119124` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder](https://agentprime.io/advisories/CVE-2026-119123.md)
  `CVE-2026-119123` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate](https://agentprime.io/advisories/CVE-2026-116160.md)
  `CVE-2026-116160` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option](https://agentprime.io/advisories/CVE-2026-116159.md)
  `CVE-2026-116159` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-33 Memory Leak in magick compare](https://agentprime.io/advisories/CVE-2026-116158.md)
  `CVE-2026-116158` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading](https://agentprime.io/advisories/CVE-2026-116157.md)
  `CVE-2026-116157` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option](https://agentprime.io/advisories/CVE-2026-116156.md)
  `CVE-2026-116156` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile](https://agentprime.io/advisories/CVE-2026-116155.md)
  `CVE-2026-116155` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit](https://agentprime.io/advisories/CVE-2026-116154.md)
  `CVE-2026-116154` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit](https://agentprime.io/advisories/CVE-2026-116153.md)
  `CVE-2026-116153` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path](https://agentprime.io/advisories/CVE-2026-116152.md)
  `CVE-2026-116152` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder](https://agentprime.io/advisories/CVE-2026-116151.md)
  `CVE-2026-116151` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder](https://agentprime.io/advisories/CVE-2026-116150.md)
  `CVE-2026-116150` · CVE record: ImageMagick ImageMagick · CVSS 2.3 Low · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images](https://agentprime.io/advisories/CVE-2026-116149.md)
  `CVE-2026-116149` · CVE record: ImageMagick ImageMagick · CVSS 7.2 High · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options](https://agentprime.io/advisories/CVE-2026-116148.md)
  `CVE-2026-116148` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Cross-site scripting (XSS)
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder](https://agentprime.io/advisories/CVE-2026-116147.md)
  `CVE-2026-116147` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder](https://agentprime.io/advisories/CVE-2026-116146.md)
  `CVE-2026-116146` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix](https://agentprime.io/advisories/CVE-2026-116145.md)
  `CVE-2026-116145` · CVE record: ImageMagick ImageMagick · CVSS 1.8 Low · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-693
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder](https://agentprime.io/advisories/CVE-2026-116144.md)
  `CVE-2026-116144` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders](https://agentprime.io/advisories/CVE-2026-116143.md)
  `CVE-2026-116143` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box](https://agentprime.io/advisories/CVE-2026-116142.md)
  `CVE-2026-116142` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder](https://agentprime.io/advisories/CVE-2026-116141.md)
  `CVE-2026-116141` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing](https://agentprime.io/advisories/CVE-2026-116140.md)
  `CVE-2026-116140` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Broken access control
- [ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder](https://agentprime.io/advisories/CVE-2026-109964.md)
  `CVE-2026-109964` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders](https://agentprime.io/advisories/CVE-2026-109282.md)
  `CVE-2026-109282` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option](https://agentprime.io/advisories/CVE-2026-109281.md)
  `CVE-2026-109281` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option](https://agentprime.io/advisories/CVE-2026-109280.md)
  `CVE-2026-109280` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access](https://agentprime.io/advisories/CVE-2026-109279.md)
  `CVE-2026-109279` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Race condition
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation](https://agentprime.io/advisories/CVE-2026-109278.md)
  `CVE-2026-109278` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-32 Policy Bypass via -script Operation](https://agentprime.io/advisories/CVE-2026-109277.md)
  `CVE-2026-109277` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder](https://agentprime.io/advisories/CVE-2026-109276.md)
  `CVE-2026-109276` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-459
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder](https://agentprime.io/advisories/CVE-2026-109275.md)
  `CVE-2026-109275` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection
- [ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script](https://agentprime.io/advisories/CVE-2026-109274.md)
  `CVE-2026-109274` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder](https://agentprime.io/advisories/CVE-2026-109273.md)
  `CVE-2026-109273` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder](https://agentprime.io/advisories/CVE-2026-109272.md)
  `CVE-2026-109272` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder](https://agentprime.io/advisories/CVE-2026-109271.md)
  `CVE-2026-109271` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-32 Memory Leak via -process Option](https://agentprime.io/advisories/CVE-2026-109270.md)
  `CVE-2026-109270` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder](https://agentprime.io/advisories/CVE-2026-109269.md)
  `CVE-2026-109269` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000](https://agentprime.io/advisories/CVE-2026-109268.md)
  `CVE-2026-109268` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder](https://agentprime.io/advisories/CVE-2026-109267.md)
  `CVE-2026-109267` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder](https://agentprime.io/advisories/CVE-2026-109266.md)
  `CVE-2026-109266` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS)
- [ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile](https://agentprime.io/advisories/CVE-2026-109265.md)
  `CVE-2026-109265` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder](https://agentprime.io/advisories/CVE-2026-109264.md)
  `CVE-2026-109264` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder](https://agentprime.io/advisories/CVE-2026-109263.md)
  `CVE-2026-109263` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder](https://agentprime.io/advisories/CVE-2026-109262.md)
  `CVE-2026-109262` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder](https://agentprime.io/advisories/CVE-2026-109261.md)
  `CVE-2026-109261` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder](https://agentprime.io/advisories/CVE-2026-109260.md)
  `CVE-2026-109260` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder](https://agentprime.io/advisories/CVE-2026-109259.md)
  `CVE-2026-109259` · CVE record: ImageMagick ImageMagick · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation](https://agentprime.io/advisories/CVE-2026-109258.md)
  `CVE-2026-109258` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName](https://agentprime.io/advisories/CVE-2026-105081.md)
  `CVE-2026-105081` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate](https://agentprime.io/advisories/CVE-2026-108693.md)
  `CVE-2026-108693` · CVE record: ImageMagick ImageMagick · CVSS 7.3 High · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-427
- [ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data](https://agentprime.io/advisories/CVE-2026-107210.md)
  `CVE-2026-107210` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-409
- [ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support](https://agentprime.io/advisories/CVE-2026-107209.md)
  `CVE-2026-107209` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageMagick: Denial of service with crafted XMP profile](https://agentprime.io/advisories/CVE-2026-107208.md)
  `CVE-2026-107208` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Policy Bypass in CUT encoder](https://agentprime.io/advisories/CVE-2026-106580.md)
  `CVE-2026-106580` · CVE record: ImageMagick ImageMagick · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control, Denial of service
- [ImageMagick: Policy Bypass when using coder as the domain.](https://agentprime.io/advisories/CVE-2026-106579.md)
  `CVE-2026-106579` · CVE record: ImageMagick ImageMagick · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-551
- [ImageMagick: Invalid Memory Free in MVG decoder](https://agentprime.io/advisories/CVE-2026-106578.md)
  `CVE-2026-106578` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-590
- [ImageMagick: Code Injection in the postscript coders](https://agentprime.io/advisories/CVE-2026-106577.md)
  `CVE-2026-106577` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection
- [ImageMagick: Denial of service possible when parsing an XMP profile.](https://agentprime.io/advisories/CVE-2026-106576.md)
  `CVE-2026-106576` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/imagemagick.md?cursor=WyIyMDI2LTEwLTA3VDE1OjM3OjE3Ljg3NTAwMFoiLCJDVkUtMjAyNi0xMDY1NzYiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=imagemagick>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/imagemagick/>. Everything for agents: <https://agentprime.io/llms.txt>.