Known vulnerabilities in ImageMagick

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144588 - Resource exhaustion
CWE-400 Medium
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU144587 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU144586 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU144585 - Use After Free
CWE-416 Medium
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU144584 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367 Low
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU144583 - Use After Free
CWE-416 Medium
No
No
6.9.13-55, 7.1.2-30 24.08.2026 SB2026082424
#VU139205 - Out-of-bounds read
CVE-2026-64685
CWE-125 Medium
No
No
7.1.2-27 23.07.2026 SB2026072343
SB2026081142
SB2026081204
#VU137768 - Integer overflow
CVE-2026-62946
CWE-190 High
No
No
6.9.13-52, 7.1.2-27 15.07.2026 SB2026071572
SB2026073048
SB2026073049
#VU137692 - Out-of-bounds write
CVE-2026-62363
CWE-787 Medium
No
No
7.1.2-27 15.07.2026 SB2026071306
SB2026072521
SB2026072523
and 2 more
#VU137368 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
7.1.2-27 13.07.2026 SB2026071306
#VU134224 - Improper input validation
CVE-2026-53460
CWE-20 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 4 more
#VU134223 - Out-of-bounds write
CVE-2026-53461
CWE-787 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 3 more
#VU134222 - Use After Free
CVE-2026-53462
CWE-416 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 2 more
#VU134221 - NULL Pointer Dereference
CVE-2026-53463
CWE-476 Low
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 4 more
#VU134220 - Missing release of memory after effective lifetime
CVE-2026-53464
CWE-401 Low
No
No
7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612105
and 3 more
#VU134219 - Heap-based Buffer Overflow
CVE-2026-53465
CWE-122 Low
No
No
7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612105
and 1 more
#VU133107 - Heap-based Buffer Overflow
CVE-2026-48994
CWE-122 Medium
No
No
6.9.13-48, 7.1.2-24 01.06.2026 SB2026060109
SB2026062101
SB2026062402
#VU133106 - Out-of-bounds write
CVE-2026-48724
CWE-787 Medium
No
No
7.1.2-24 31.05.2026 SB2026053111
SB2026060559
SB2026062101
and 1 more
#VU133105 - Uncontrolled Recursion
CVE-2026-48734
CWE-674 Medium
No
No
6.9.13-49, 7.1.2-24 31.05.2026 SB2026053111
SB2026060559
SB2026062101
and 2 more
#VU133104 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-48733
CWE-835 Medium
No
No
6.9.13-49, 7.1.2-24 31.05.2026 SB2026053111
SB2026060559


Showing elements 1 - 20 out of 536