Known vulnerabilities in ImageMagick

Software: ImageMagick
Software CPE: cpe:2.3:o:fedoraproject:imagemagick:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 39
Public exploits: 4
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 39 known vulnerabilities: 10 high, 22 medium, 7 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125883 - Uncontrolled Recursion
CVE-2026-33908
CWE-674 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 15 more
#VU125880 - Heap-based Buffer Overflow
CVE-2026-33901
CWE-122 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 14 more
#VU125869 - Heap-based Buffer Overflow
CVE-2026-40310
CWE-122 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 14.04.2026 SB2026041434
SB20260417154
SB20260417155
and 15 more
#VU119080 - Use After Free
CVE-2025-65955
CWE-416 High
No
No
6.9.13.58-1.el8, 6.9.13.58-1.el9 02.12.2025 SB2025120238
SB2025120558
SB2025120559
and 10 more
#VU117368 - Integer overflow
CVE-2025-62171
CWE-190 Low
No
No
6.9.13.58-1.el8, 6.9.13.58-1.el9 20.10.2025 SB2025102013
SB20251024104
SB20251024105
and 14 more
#VU114896 - Out-of-bounds write
CVE-2025-57807
CWE-787 High
No
No
6.9.13.58-1.el8, 6.9.13.58-1.el9 08.09.2025 SB2025090812
SB2025091155
SB2025091299
and 12 more
#VU114419 - Divide By Zero
CVE-2025-55212
CWE-369 Medium
No
No
6.9.13.58-1.el8, 6.9.13.58-1.el9 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 14 more
#VU114418 - Use of Externally-Controlled Format String
CVE-2025-55298
CWE-134 Medium
No
No
7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 15 more
#VU114417 - Integer overflow
CVE-2025-57803
CWE-190 Medium
No
No
6.9.13.58-1.el8, 6.9.13.58-1.el9 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 19 more
#VU114299 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2025-55160
CWE-758 Low
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 20.08.2025 SB20250820103
SB2025090583
SB2025090584
and 20 more
#VU114296 - Heap-based Buffer Overflow
CVE-2025-55004
CWE-122 High
No
No
6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 20.08.2025 SB20250820103
SB2025090584
SB2025090585
and 14 more
#VU114276 - Heap-based Buffer Overflow
CVE-2025-55005
CWE-122 Medium
No
No
6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 20.08.2025 SB20250820103
SB2025090584
SB2025090585
and 15 more
#VU114264 - Integer overflow
CVE-2025-55154
CWE-190 High
No
No
6.9.13.52-1.el8, 6.9.13.52-1.el9, 6.9.13.52-2.el8, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 20.08.2025 SB20250820103
SB2025090583
SB2025090584
and 20 more
#VU112870 - Missing release of memory after effective lifetime
CVE-2025-53019
CWE-401 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 14.07.2025 SB2025071415
SB2025072521
SB2025072522
and 18 more
#VU112869 - Stack-based buffer overflow
CVE-2025-53101
CWE-121 High
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 14.07.2025 SB2025071415
SB2025072521
SB2025072522
and 17 more
#VU112868 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-53015
CWE-835 Medium
Available
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9, 7.1.2.27-1.el10_3, 7.1.2.27-1.fc43, 7.1.2.27-1.fc44 14.07.2025 SB2025071415
SB2025072522
SB2025072523
and 13 more
#VU112867 - Heap-based Buffer Overflow
CVE-2025-53014
CWE-122 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 14.07.2025 SB2025071415
SB2025072521
SB2025072522
and 15 more
#VU109949 - Resource exhaustion
CVE-2025-46393
CWE-400 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 29.05.2025 SB20250529127
SB20250529129
SB20250529130
and 9 more
#VU109948 - Resource exhaustion
CVE-2025-43965
CWE-400 Medium
No
No
6.9.13.49-1.el8, 6.9.13.49-1.el9, 6.9.13.50-1.el8, 6.9.13.50-1.el9 29.05.2025 SB20250529127
SB20250529129
SB20250529130
and 12 more
#VU82972 - Use After Free
CVE-2023-5341
CWE-416 High
No
No
6.9.13.14-1.el8, 6.9.13.14-1.el9, 7.1.1.26-1.fc38, 7.1.1.26-1.fc39, 7.1.1.26-2.fc38, 7.1.1.26-2.fc39 10.11.2023 SB2023111026
SB2023111027
SB2023111030
and 16 more


Showing elements 1 - 20 out of 39