Known vulnerabilities in ImageMagick
Vendor:
Fedoraproject
Software:
ImageMagick
Software CPE:
cpe:2.3:o:fedoraproject:imagemagick:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
39
Public exploits:
4
Known exploited (KEV):
0
Breakdown by Severity Chart
6.9.13.58-1.el9
6.9.13.58-1.el8
7.1.2.33-1.fc44
7.1.2.33-1.fc45
7.1.2.33-1.fc43
7.1.2.33-1.fc46
7.1.2.32-1.el10_2
7.1.2.32-1.el10_3
7.1.2.32-1.fc45
7.1.2.31-2.fc45
7.1.2.29-2.fc46
7.1.2.29-2.fc45
6.9.13.52-2.el8
6.9.13.52-1.el9
6.9.13.52-1.el8
7.1.2.27-1.fc43
7.1.2.27-1.fc44
7.1.2.27-1.el10_3
6.9.13.50-1.el9
6.9.13.50-1.el8
6.9.13.49-1.el9
6.9.13.49-1.el8
7.1.2.13-2.fc44
7.1.2.13-2.fc45
6.9.10.86-1.fc31
6.9.10.86-1.el8
6.9.10.75-1.fc30
6.9.10.75-1.fc31
6.9.10.64-1.fc31
6.9.10.64-1.fc30
6.9.9.38-1.fc26
6.9.9.38-1.fc27
6.9.9.38-1.fc28
6.9.9.22-1.fc26
6.9.9.22-1.fc27
6.9.9.19-1.fc25
6.9.9.19-1.fc26
6.9.9.19-1.fc27
6.9.9.15-1.fc25
6.9.9.15-1.fc26
6.9.9.15-1.fc27
6.9.9.13-1.fc27
6.9.9.13-1.fc25
6.9.9.13-1.fc26
7.0.6-9.2.fc26
7.0.6-9.2.fc25
6.9.2.7-1.fc22
6.9.2.7-1.fc23
6.8.8.10-9.fc22
6.8.8.10-6.fc21
7.1.1.26-2.fc39
7.1.1.26-2.fc38
6.9.12.63-1.el8
6.9.12.63-1.el9
6.9.12.63-1.fc35
6.9.12.63-1.fc36
6.9.12.63-1.fc37
6.9.12.62-1.el8
6.9.12.62-1.el9
6.9.12.62-1.fc35
6.9.12.62-1.fc36
6.9.12.62-1.fc37
6.9.12.61-1.el8
6.9.12.48-2.el8
6.9.12.31-1.fc34
6.9.12.31-1.fc35
6.9.12.30-1.fc35
6.9.12.28-1.fc35
6.9.13.14-1.el8
6.9.13.14-1.el9
7.1.1.26-1.fc38
7.1.1.26-1.fc39
6.9.12.93-1.el8
6.9.12.93-1.el9
6.9.12.93-1.fc37
7.1.1.15-1.fc38
7.1.1.11-1.fc38
7.1.1.10-1.fc38
6.9.12.86-1.fc37
6.9.12.86-1.el8
7.1.1.4-3.fc38
6.9.12.82-1.el8
6.9.12.82-1.el9
6.9.12.82-1.fc36
6.9.12.82-1.fc37
7.1.1.4-2.fc38
6.9.12.77-1.el8
6.9.12.77-1.el9
6.9.12.77-1.fc36
6.9.12.77-1.fc37
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125883 - Uncontrolled Recursion CVE-2026-33908 |
CWE-674 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 14.04.2026 |
SB2026041434 SB20260417154 SB20260417155 and 15 more |
||
| #VU125880 - Heap-based Buffer Overflow CVE-2026-33901 |
CWE-122 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 14.04.2026 |
SB2026041434 SB20260417154 SB20260417155 and 14 more |
||
| #VU125869 - Heap-based Buffer Overflow CVE-2026-40310 |
CWE-122 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 14.04.2026 |
SB2026041434 SB20260417154 SB20260417155 and 15 more |
||
| #VU119080 - Use After Free CVE-2025-65955 |
CWE-416 | High | 6.9.13.58-1.el8, 6.9.13.58-1.el9 | 02.12.2025 |
SB2025120238 SB2025120558 SB2025120559 and 10 more |
||
| #VU117368 - Integer overflow CVE-2025-62171 |
CWE-190 | Low | 6.9.13.58-1.el8, 6.9.13.58-1.el9 | 20.10.2025 |
SB2025102013 SB20251024104 SB20251024105 and 14 more |
||
| #VU114896 - Out-of-bounds write CVE-2025-57807 |
CWE-787 | High | 6.9.13.58-1.el8, 6.9.13.58-1.el9 | 08.09.2025 |
SB2025090812 SB2025091155 SB2025091299 and 12 more |
||
| #VU114419 - Divide By Zero CVE-2025-55212 |
CWE-369 | Medium | 6.9.13.58-1.el8, 6.9.13.58-1.el9 | 26.08.2025 |
SB2025082604 SB2025090583 SB2025090584 and 14 more |
||
| #VU114418 - Use of Externally-Controlled Format String CVE-2025-55298 |
CWE-134 | Medium | 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 26.08.2025 |
SB2025082604 SB2025090583 SB2025090584 and 15 more |
||
| #VU114417 - Integer overflow CVE-2025-57803 |
CWE-190 | Medium | 6.9.13.58-1.el8, 6.9.13.58-1.el9 | 26.08.2025 |
SB2025082604 SB2025090583 SB2025090584 and 19 more |
||
| #VU114299 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2025-55160 |
CWE-758 | Low | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 20.08.2025 |
SB20250820103 SB2025090583 SB2025090584 and 20 more |
||
| #VU114296 - Heap-based Buffer Overflow CVE-2025-55004 |
CWE-122 | High | 6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 20.08.2025 |
SB20250820103 SB2025090584 SB2025090585 and 14 more |
||
| #VU114276 - Heap-based Buffer Overflow CVE-2025-55005 |
CWE-122 | Medium | 6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 20.08.2025 |
SB20250820103 SB2025090584 SB2025090585 and 15 more |
||
| #VU114264 - Integer overflow CVE-2025-55154 |
CWE-190 | High | 6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 20.08.2025 |
SB20250820103 SB2025090583 SB2025090584 and 20 more |
||
| #VU112870 - Missing release of memory after effective lifetime CVE-2025-53019 |
CWE-401 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 14.07.2025 |
SB2025071415 SB2025072521 SB2025072522 and 18 more |
||
| #VU112869 - Stack-based buffer overflow CVE-2025-53101 |
CWE-121 | High | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 14.07.2025 |
SB2025071415 SB2025072521 SB2025072522 and 17 more |
||
| #VU112868 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-53015 |
CWE-835 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 | 14.07.2025 |
SB2025071415 SB2025072522 SB2025072523 and 13 more |
||
| #VU112867 - Heap-based Buffer Overflow CVE-2025-53014 |
CWE-122 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 14.07.2025 |
SB2025071415 SB2025072521 SB2025072522 and 15 more |
||
| #VU109949 - Resource exhaustion CVE-2025-46393 |
CWE-400 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 29.05.2025 |
SB20250529127 SB20250529129 SB20250529130 and 9 more |
||
| #VU109948 - Resource exhaustion CVE-2025-43965 |
CWE-400 | Medium | 6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 | 29.05.2025 |
SB20250529127 SB20250529129 SB20250529130 and 12 more |
||
| #VU82972 - Use After Free CVE-2023-5341 |
CWE-416 | High | 6.9.13.14-1.el8, 6.9.13.14-1.el9, 7.1.1.26-1.fc38, 7.1.1.26-1.fc39, 7.1.1.26-2.fc38, 7.1.1.26-2.fc39 | 10.11.2023 |
SB2023111026 SB2023111027 SB2023111030 and 16 more |
Showing elements 1 - 20 out of 39