Known vulnerabilities in ImageMagick - page 6

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 570
Public exploits: 11
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 570 known vulnerabilities: 1 critical, 85 high, 292 medium, 192 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123262 - Use After Free
CVE-2026-56373
CWE-416 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB20260914102
SB20260914104
and 8 more
#VU123261 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-26283
CWE-835 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 7 more
#VU123260 - Out-of-bounds read
CVE-2026-56378
CWE-125 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026091498
SB20261001147
and 1 more
#VU123259 - Resource exhaustion
CVE-2026-26066
CWE-400 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 12 more
#VU123258 - NULL Pointer Dereference
CVE-2026-26983
CWE-476 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 10 more
#VU123257 - Allocation of Resources Without Limits or Throttling
CVE-2026-25985
CWE-770 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 9 more
#VU123256 - Integer overflow
CVE-2026-25989
CWE-190 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 9 more
#VU123255 - Heap-based Buffer Overflow
CVE-2026-25897
CWE-122 High
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030625
SB2026030957
and 5 more
#VU123254 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-25797
CWE-94 High
No
No
6.9.13-51, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 16 more
#VU123253 - Improper Encoding or Escaping of Output
CVE-2026-56379
CWE-116 High
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB20260914124
SB20260914125
and 8 more
#VU123251 - Missing release of memory after effective lifetime
CVE-2026-56371
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026091498
SB20260914124
and 5 more
#VU123250 - Missing release of memory after effective lifetime
CVE-2026-56368
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026091498
SB20260914124
and 5 more
#VU123249 - Out-of-bounds read
CVE-2026-25898
CWE-125 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030625
SB2026030639
and 11 more
#VU123248 - Heap-based Buffer Overflow
CVE-2026-25794
CWE-122 High
No
No
7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 6 more
#VU123231 - Missing release of memory after effective lifetime
CVE-2026-25796
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 14 more
#VU123229 - NULL Pointer Dereference
CVE-2026-25795
CWE-476 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 12 more
#VU123228 - Out-of-bounds read
CVE-2026-56362
CWE-125 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB20260914129
SB20260914130
and 2 more
#VU123227 - Missing release of memory after effective lifetime
CVE-2026-25637
CWE-401 Medium
No
No
7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 10 more
#VU123226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-25965
CWE-22 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 11 more
#VU123224 - Heap-based Buffer Overflow
CVE-2026-27799
CWE-122 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030681
SB2026030957
and 7 more


Showing elements 101 - 120 out of 570