Known vulnerabilities in ImageMagick - page 26

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 570
Public exploits: 11
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 570 known vulnerabilities: 1 critical, 85 high, 292 medium, 192 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131592 - Out-of-bounds read
CVE-2026-42326
CWE-125 Low
No
No
6.9.13-47, 7.1.2-22 16.05.2026 SB2026051608
SB20260522129
SB20260522130
and 9 more
#VU131591 - Integer overflow
CVE-2026-56363
CWE-190 Low
No
No
6.9.13-47, 7.1.2-22 16.05.2026 SB2026051608
SB2026091498
SB20260914124
and 4 more
#VU131590 - Allocation of Resources Without Limits or Throttling
CVE-2026-45031
CWE-770 Medium
No
No
6.9.13-47, 7.1.2-22 16.05.2026 SB2026051608
SB20260522129
SB20260522130
and 10 more
#VU131589 - Reusing a Nonce, Key Pair in Encryption
CVE-2026-56369
CWE-323 Low
No
No
6.9.13-47, 7.1.2-22 16.05.2026 SB2026051608
#VU131588 - Out-of-bounds read
CVE-2026-45359
CWE-125 Low
No
No
7.1.2-22 16.05.2026 SB2026051608
SB20260522129
SB20260522130
and 8 more
#VU131587 - Out-of-bounds read
CVE-2026-45358
CWE-125 Medium
No
No
6.9.13-47, 7.1.2-22 16.05.2026 SB2026051608
SB20260522129
SB20260522130
and 7 more
#VU125870 - Heap-based Buffer Overflow
CVE-2026-40169
CWE-122 Low
No
No
6.9.13-47, 7.1.2-22 14.04.2026 SB20260417154
SB20260417156
SB20260417157
and 10 more
#VU123585 - Missing release of memory after effective lifetime
CVE-2026-25969
CWE-401 Medium
No
No
7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 8 more
#VU123584 - Integer overflow
CVE-2026-25970
CWE-190 Medium
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 11 more
#VU123581 - Uncontrolled Recursion
CVE-2026-25971
CWE-674 Low
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 11 more
#VU123580 - Out-of-bounds read
CVE-2026-25982
CWE-125 Medium
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 7 more
#VU123578 - Out-of-bounds read
CVE-2026-25576
CWE-125 Low
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 12 more
#VU123575 - Use After Free
CVE-2026-25983
CWE-416 Medium
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030625
SB2026030639
and 12 more
#VU123574 - Out-of-bounds read
CVE-2026-24481
CWE-125 Medium
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 10 more
#VU123570 - Heap-based Buffer Overflow
CVE-2026-26284
CWE-122 Medium
No
No
6.9.13-40, 7.1.2-15 05.03.2026 SB2026030565
SB2026030625
SB2026030639
and 13 more
#VU121674 - Heap-based Buffer Overflow
CVE-2026-23876
CWE-122 High
No
No
6.9.13-38, 7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 13 more
#VU121673 - Stack-based buffer overflow
CVE-2026-23874
CWE-121 Low
No
No
7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 9 more
#VU121672 - Missing release of memory after effective lifetime
CVE-2026-56364
CWE-401 Low
Available
No
7.1.2-13 20.01.2026 SB2026012004
SB2026091498
SB20260914124
and 2 more
#VU121670 - Release of invalid pointer or reference
CVE-2026-22770
CWE-763 High
No
No
7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 7 more
#VU121669 - NULL Pointer Dereference
CVE-2026-23952
CWE-476 Medium
No
No
6.9.13-38, 7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 11 more


Showing elements 501 - 520 out of 570