Known vulnerabilities in ImageMagick - page 8

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123253 - Improper Encoding or Escaping of Output
CWE-116 High
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
#VU123251 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
#VU123250 - Missing release of memory after effective lifetime
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
#VU123249 - Out-of-bounds read
CVE-2026-25898
CWE-125 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030625
SB2026030639
and 11 more
#VU123248 - Heap-based Buffer Overflow
CVE-2026-25794
CWE-122 High
No
No
7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 6 more
#VU123231 - Missing release of memory after effective lifetime
CVE-2026-25796
CWE-401 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 14 more
#VU123229 - NULL Pointer Dereference
CVE-2026-25795
CWE-476 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 12 more
#VU123228 - Out-of-bounds read
CWE-125 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
#VU123227 - Missing release of memory after effective lifetime
CVE-2026-25637
CWE-401 Medium
No
No
7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 10 more
#VU123226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-25965
CWE-22 Medium
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 11 more
#VU123225 - Out-of-bounds read
CVE-2026-27798
CWE-125 Low
No
No
6.9.13-40, 7.1.2-15 25.02.2026 SB2026022540
SB2026030681
SB2026030957
and 5 more
#VU123170 - Use After Free
CWE-416 High
No
No
6.9.13-40, 7.1.2-15 24.02.2026 SB2026022540
#VU121674 - Heap-based Buffer Overflow
CVE-2026-23876
CWE-122 High
No
No
6.9.13-38, 7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 13 more
#VU121673 - Stack-based buffer overflow
CVE-2026-23874
CWE-121 Low
No
No
7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 9 more
#VU121672 - Missing release of memory after effective lifetime
CWE-401 Low
Available
No
7.1.2-13 20.01.2026 SB2026012004
#VU121670 - Release of invalid pointer or reference
CVE-2026-22770
CWE-763 High
No
No
7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 7 more
#VU121669 - NULL Pointer Dereference
CVE-2026-23952
CWE-476 Medium
No
No
6.9.13-38, 7.1.2-13 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 11 more
#VU121122 - Integer overflow
CVE-2025-69204
CWE-190 Medium
No
No
7.1.2-12 09.01.2026 SB2026010910
SB2026010912
SB2026010914
and 7 more
#VU121121 - Uncontrolled Recursion
CVE-2025-68950
CWE-674 Medium
No
No
7.1.2-12 09.01.2026 SB2026010910
SB2026010912
SB2026010913
and 8 more
#VU121120 - Uncontrolled Recursion
CVE-2025-68618
CWE-674 Medium
No
No
7.1.2-12 09.01.2026 SB2026010910
SB2026010912
SB2026010913
and 10 more


Showing elements 141 - 160 out of 536