Known vulnerabilities in ImageMagick 7.0.7-1 Q16

Software: ImageMagick
Version: 7.0.7-1 Q16
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 86
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ImageMagick version 7.0.7-1 Q16 ImageMagick 7.0.7-1 Q16 is affected by 86 vulnerabilities: 12 high, 31 medium, 43 low Critical High Medium Low

Vulnerabilities (86)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137768 - Integer overflow
CVE-2026-62946
CWE-190 High
No
No
6.9.13-52, 7.1.2-27 15.07.2026 SB2026071572
SB2026073048
SB2026073049
#VU135669 - Missing Authorization
CWE-862 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135668 - Use After Free
CWE-416 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135666 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-55595
CWE-835 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU135665 - Out-of-bounds write
CVE-2026-55577
CWE-787 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU135664 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135663 - Uncontrolled Recursion
CVE-2026-55594
CWE-674 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU134224 - Improper input validation
CVE-2026-53460
CWE-20 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 4 more
#VU134223 - Out-of-bounds write
CVE-2026-53461
CWE-787 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 3 more
#VU134222 - Use After Free
CVE-2026-53462
CWE-416 Medium
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 2 more
#VU134221 - NULL Pointer Dereference
CVE-2026-53463
CWE-476 Low
No
No
6.9.13-50, 7.1.2-25 10.06.2026 SB2026061064
SB20260612103
SB20260612104
and 4 more
#VU133105 - Uncontrolled Recursion
CVE-2026-48734
CWE-674 Medium
No
No
6.9.13-49, 7.1.2-24 31.05.2026 SB2026053111
SB2026060559
SB2026062101
and 2 more
#VU133104 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-48733
CWE-835 Medium
No
No
6.9.13-49, 7.1.2-24 31.05.2026 SB2026053111
SB2026060559
#VU133103 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367 Low
No
No
6.9.13-48, 7.1.2-24 31.05.2026 SB2026051818
#VU133102 - Improper input validation
CVE-2026-49218
CWE-20 Medium
No
No
6.9.13-48, 7.1.2-24 31.05.2026 SB2026051818
SB2026060559
SB2026062101
and 1 more
#VU133101 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-49219
CWE-22 Low
No
No
6.9.13-51, 7.1.2-26 31.05.2026 SB2026051818
SB2026060559
SB2026062101
#VU131770 - Out-of-bounds read
CVE-2026-47166
CWE-125 Low
No
No
6.9.13-48, 7.1.2-23 19.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131769 - Missing Authentication for Critical Function
CVE-2026-47165
CWE-306 Low
No
No
6.9.13-48, 7.1.2-23 19.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131767 - Heap-based Buffer Overflow
CVE-2026-46692
CWE-122 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 7 more
#VU131766 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-46693
CWE-362 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more


Showing elements 1 - 20 out of 86