# ImageMagick.

Every CVE that names ImageMagick among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [ImageMagick: Unclosed file pointer in magick script](https://agentprime.io/advisories/CVE-2026-106575.md)
  `CVE-2026-106575` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-775
- [ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash](https://agentprime.io/advisories/CVE-2026-106574.md)
  `CVE-2026-106574` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageMagick: Denial of service in MVG decoder](https://agentprime.io/advisories/CVE-2026-106573.md)
  `CVE-2026-106573` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Stack Overflown CALS decoder due to missing depth check.](https://agentprime.io/advisories/CVE-2026-106572.md)
  `CVE-2026-106572` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash](https://agentprime.io/advisories/CVE-2026-106571.md)
  `CVE-2026-106571` · CVE record: ImageMagick ImageMagick · CVSS 5.1 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageMagick: Denial of service in distributed pixel cache server](https://agentprime.io/advisories/CVE-2026-106570.md)
  `CVE-2026-106570` · CVE record: ImageMagick ImageMagick · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Denial of service in ASE decoder because of missing security checks](https://agentprime.io/advisories/CVE-2026-106569.md)
  `CVE-2026-106569` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Infinite Loop when reading a crafted XMP profile](https://agentprime.io/advisories/CVE-2026-106568.md)
  `CVE-2026-106568` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Infinite Loop in PSD decoder on 32-bit builds](https://agentprime.io/advisories/CVE-2026-106567.md)
  `CVE-2026-106567` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service, CWE-196
- [ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check](https://agentprime.io/advisories/CVE-2026-106566.md)
  `CVE-2026-106566` · CVE record: ImageMagick ImageMagick · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-61
- [ImageMagick: Infinite Loop in bzip2 compressed images.](https://agentprime.io/advisories/CVE-2026-106565.md)
  `CVE-2026-106565` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Write in EXR decoder](https://agentprime.io/advisories/CVE-2026-106564.md)
  `CVE-2026-106564` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE](https://agentprime.io/advisories/CVE-2026-105083.md)
  `CVE-2026-105083` · CVE record: ImageMagick ImageMagick · CVSS 1.8 Low · Not analysed yet · Published 3 Oct 2026 · Tags: CWE-693
- [ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder](https://agentprime.io/advisories/CVE-2026-102635.md)
  `CVE-2026-102635` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder](https://agentprime.io/advisories/CVE-2026-93590.md)
  `CVE-2026-93590` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder](https://agentprime.io/advisories/CVE-2026-93589.md)
  `CVE-2026-93589` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM](https://agentprime.io/advisories/CVE-2026-93588.md)
  `CVE-2026-93588` · CVE record: ImageMagick ImageMagick · CVSS 2.3 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder](https://agentprime.io/advisories/CVE-2026-93587.md)
  `CVE-2026-93587` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob](https://agentprime.io/advisories/CVE-2026-93586.md)
  `CVE-2026-93586` · CVE record: ImageMagick ImageMagick · CVSS 2.1 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-30 Heap-use-after-free via Layer](https://agentprime.io/advisories/CVE-2026-86425.md)
  `CVE-2026-86425` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race](https://agentprime.io/advisories/CVE-2026-86424.md)
  `CVE-2026-86424` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal
- [ImageMagick before 7.1.2-30 Heap-use-after-free via GetList](https://agentprime.io/advisories/CVE-2026-86423.md)
  `CVE-2026-86423` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Memory corruption
- [ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race](https://agentprime.io/advisories/CVE-2026-86422.md)
  `CVE-2026-86422` · CVE record: ImageMagick ImageMagick · CVSS 1.0 Low · Not analysed yet · Published 7 Sept 2026 · Tags: Path traversal
- [ImageMagick before 7.1.2-30 Memory Leak via MSL decoder](https://agentprime.io/advisories/CVE-2026-86421.md)
  `CVE-2026-86421` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service
- [ImageMagick before 7.1.2-30 Denial of Service Memory Budget](https://agentprime.io/advisories/CVE-2026-86420.md)
  `CVE-2026-86420` · CVE record: ImageMagick ImageMagick · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check](https://agentprime.io/advisories/CVE-2026-64685.md)
  `CVE-2026-64685` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Memory corruption
- [ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder](https://agentprime.io/advisories/CVE-2026-55577.md)
  `CVE-2026-55577` · CVE record: ImageMagick ImageMagick · CVSS 5.9 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Memory corruption, CWE-754, CWE-755
- [ImageMagick - Policy Bypass via Incorrect Path Validation](https://agentprime.io/advisories/CVE-2026-56377.md)
  `CVE-2026-56377` · CVE record: ImageMagick ImageMagick · CVSS 4.8 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Path traversal
- [ImageMagick: Stack buffer overflow in XTileImage](https://agentprime.io/advisories/CVE-2026-42050.md)
  `CVE-2026-42050` · CVE record: ImageMagick ImageMagick · CVSS 5.5 Medium · Not analysed yet · Published 11 May 2026 · Tags: Memory corruption
- [ImageMagick has a possible stack buffer overflow in sixel encoder](https://agentprime.io/advisories/CVE-2026-32259.md)
  `CVE-2026-32259` · CVE record: ImageMagick ImageMagick · CVSS 6.7 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Memory corruption
- [Heap buffer overflow with attacker-controlled data in XBM parser](https://agentprime.io/advisories/CVE-2026-23876.md)
  `CVE-2026-23876` · CVE record: ImageMagick ImageMagick · CVSS 8.1 High · Not analysed yet · Published 20 Jan 2026 · Tags: Memory corruption
- [ImageMagick converting a malicious MVG file to SVG caused an integer overflow.](https://agentprime.io/advisories/CVE-2025-69204.md)
  `CVE-2025-69204` · CVE record: ImageMagick ImageMagick · CVSS 5.3 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Memory corruption
- [ImageMagick: heap-buffer overflow in log colorspace handling](https://agentprime.io/advisories/CVE-2025-55005.md)
  `CVE-2025-55005` · CVE record: ImageMagick ImageMagick · CVSS 5.5 Medium · Not analysed yet · Published 13 Aug 2025 · Tags: Memory corruption
- [Incorrect buffer size calculation in ImageMagick](https://agentprime.io/advisories/CVE-2025-46393.md)
  `CVE-2025-46393` · CVE record: ImageMagick ImageMagick · CVSS 2.9 Low · Not analysed yet · Published 23 Apr 2025 · Tags: Memory corruption
- [Incorrect buffer size calculation in ImageMagick](https://agentprime.io/advisories/CVE-2025-43965.md)
  `CVE-2025-43965` · CVE record: ImageMagick ImageMagick · CVSS 2.9 Low · Not analysed yet · Published 23 Apr 2025 · Tags: Memory corruption
- [Arbitrary Code Execution in \`AppImage\` version \`ImageMagick\`](https://agentprime.io/advisories/CVE-2024-41817.md)
  `CVE-2024-41817` · CVE record: ImageMagick ImageMagick · CVSS 7.0 High · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-427
- [Use after free in ImageMagick](https://agentprime.io/advisories/CVE-2023-34475.md)
  `CVE-2023-34475` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2023 · Tags: Memory corruption
- [Heap-based buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2023-34474.md)
  `CVE-2023-34474` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2023 · Tags: Memory corruption
- [Stack-based buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2023-3195.md)
  `CVE-2023-3195` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2023 · Tags: Memory corruption
- [Heap-based buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2023-2157.md)
  `CVE-2023-2157` · CVE record: ImageMagick · CVSS 5.5 Medium · Not analysed yet · Published 6 Jun 2023 · Tags: Memory corruption
- [Command injection in ImageMagick](https://agentprime.io/advisories/CVE-2023-34153.md)
  `CVE-2023-34153` · CVE record: ImageMagick · CVSS 7.8 High · Not analysed yet · Published 30 May 2023 · Tags: Command injection
- [Improper input validation in ImageMagick](https://agentprime.io/advisories/CVE-2023-34152.md)
  `CVE-2023-34152` · CVE record: ImageMagick · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 May 2023 · Tags: CWE-20
- [Integer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2023-34151.md)
  `CVE-2023-34151` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption
- [Heap-based buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2023-1906.md)
  `CVE-2023-1906` · CVE record: ImageMagick · CVSS 5.5 Medium · Not analysed yet · Published 12 Apr 2023 · Tags: Memory corruption
- [Buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2022-3213.md)
  `CVE-2022-3213` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 19 Sept 2022 · Tags: Memory corruption
- [Buffer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2022-1115.md)
  `CVE-2022-1115` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 29 Aug 2022 · Tags: Memory corruption
- [Out-of-bounds read in ImageMagick](https://agentprime.io/advisories/CVE-2022-0284.md)
  `CVE-2022-0284` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 29 Aug 2022 · Tags: Memory corruption
- [Memory leak in ImageMagick](https://agentprime.io/advisories/CVE-2021-3574.md)
  `CVE-2021-3574` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 26 Aug 2022 · Tags: Denial of service
- [Integer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2021-20224.md)
  `CVE-2021-20224` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 25 Aug 2022 · Tags: Memory corruption
- [Reachable assertion in ImageMagick](https://agentprime.io/advisories/CVE-2022-2719.md)
  `CVE-2022-2719` · CVE record: ImageMagick · CVSS 5.5 Medium · Not analysed yet · Published 9 Aug 2022 · Tags: Denial of service
- [ImageMagick: In ImageMagick, there is load of misaligned address for type 'double'…](https://agentprime.io/advisories/CVE-2022-32547.md)
  `CVE-2022-32547` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2022
- [Integer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2022-32546.md)
  `CVE-2022-32546` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2022 · Tags: Memory corruption
- [Integer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2022-32545.md)
  `CVE-2022-32545` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 16 Jun 2022 · Tags: Memory corruption
- [Use after free in ImageMagick](https://agentprime.io/advisories/CVE-2022-1114.md)
  `CVE-2022-1114` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 29 Apr 2022 · Tags: Memory corruption
- [Improper input validation in imagemagick](https://agentprime.io/advisories/CVE-2021-4219.md)
  `CVE-2021-4219` · CVE record: imagemagick · No CVSS score · Not analysed yet · Published 23 Mar 2022 · Tags: CWE-20
- [Out-of-bounds read in ImageMagick](https://agentprime.io/advisories/CVE-2021-3610.md)
  `CVE-2021-3610` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 24 Feb 2022 · Tags: Memory corruption
- [NULL pointer dereference in ImageMagick](https://agentprime.io/advisories/CVE-2021-3596.md)
  `CVE-2021-3596` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 24 Feb 2022 · Tags: Memory corruption
- [Use after free in ImageMagick](https://agentprime.io/advisories/CVE-2021-3962.md)
  `CVE-2021-3962` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 19 Nov 2021 · Tags: Memory corruption
- [Issue when Configuring the ImageMagick Security Policy](https://agentprime.io/advisories/CVE-2021-39212.md)
  `CVE-2021-39212` · CVE record: ImageMagick ImageMagick · CVSS 4.4 Medium · Not analysed yet · Published 13 Sept 2021 · Tags: Information disclosure
- [Integer overflow in ImageMagick](https://agentprime.io/advisories/CVE-2020-27769.md)
  `CVE-2020-27769` · CVE record: ImageMagick · No CVSS score · Not analysed yet · Published 14 May 2021 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/imagemagick.md>
Older: <https://agentprime.io/advisories/technology/imagemagick.md?cursor=WyIyMDIxLTA1LTE0VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMC0yNzc2OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=imagemagick&cursor=WyIyMDI2LTEwLTA3VDE1OjM3OjE3Ljg3NTAwMFoiLCJDVkUtMjAyNi0xMDY1NzYiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/imagemagick/?cursor=WyIyMDI2LTEwLTA3VDE1OjM3OjE3Ljg3NTAwMFoiLCJDVkUtMjAyNi0xMDY1NzYiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.