Known vulnerabilities in ImageMagick - page 2

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135669 - Missing Authorization
CWE-862 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135668 - Use After Free
CWE-416 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135667 - Out-of-bounds write
CVE-2026-55597
CWE-787 Medium
No
No
7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 1 more
#VU135666 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-55595
CWE-835 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU135665 - Out-of-bounds write
CVE-2026-55577
CWE-787 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU135664 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
#VU135663 - Uncontrolled Recursion
CVE-2026-55594
CWE-674 Medium
No
No
6.9.13-51, 7.1.2-26 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 2 more
#VU133103 - Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-367 Low
No
No
6.9.13-48, 7.1.2-24 31.05.2026 SB2026051818
#VU133102 - Improper input validation
CVE-2026-49218
CWE-20 Medium
No
No
6.9.13-48, 7.1.2-24 31.05.2026 SB2026051818
SB2026060559
SB2026062101
and 1 more
#VU133101 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-49219
CWE-22 Low
No
No
6.9.13-51, 7.1.2-26 31.05.2026 SB2026051818
SB2026060559
SB2026062101
#VU131770 - Out-of-bounds read
CVE-2026-47166
CWE-125 Low
No
No
6.9.13-48, 7.1.2-23 19.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131769 - Missing Authentication for Critical Function
CVE-2026-47165
CWE-306 Low
No
No
6.9.13-48, 7.1.2-23 19.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131767 - Heap-based Buffer Overflow
CVE-2026-46692
CWE-122 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 7 more
#VU131766 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-46693
CWE-362 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131629 - Stack-based buffer overflow
CVE-2026-46557
CWE-121 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 5 more
#VU131628 - Out-of-bounds write
CVE-2026-46559
CWE-787 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131627 - Use After Free
CVE-2026-46523
CWE-416 Low
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 7 more
#VU131624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-46522
CWE-835 Medium
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131623 - Out-of-bounds write
CVE-2026-46520
CWE-787 Medium
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more
#VU131622 - Out-of-bounds write
CVE-2026-46521
CWE-787 Medium
No
No
6.9.13-48, 7.1.2-23 18.05.2026 SB2026051818
SB20260522129
SB20260522130
and 6 more


Showing elements 21 - 40 out of 536