ImageMagick

Records916All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical54CVSS 9.0–10.0

CVSS high243CVSS 7.0–8.9

Exploited now

ImageMagick records in CISA KEV

TI-2016-03144 ImageMagick Improper Input Validation Vulnerability CRITICAL 96KEV 2024-09-09 TI-2016-03145 ImageMagick Arbitrary File Deletion Vulnerability HIGH 82KEV 2021-11-03 TI-2016-03148 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability HIGH 82KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imagemagick 889 records CRITICAL Graphicsmagick 2 records LOW Libmagick Library 1 record LOW

Records

889 records in Imagemagick · all components

TI-2016-03144 CVE-2016-3714 · GHSA-24cp-26gx-3pp4

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT…

CRITICAL 96KEV

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharact…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.97485 Published 2016-05-05 Partial fix CWE-20

TI-2023-16996 CVE-2023-34152 · GHSA-47q6-hqqr-mcr3

Improper input validation in ImageMagick

HIGH 82

A vulnerability was found in ImageMagick.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08011 Published 2023-05-30 No fix listed CWE-20

TI-2016-03148 CVE-2016-3718 · GHSA-q994-gg9f-3g56

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1…

HIGH 82KEV

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.7565 Published 2016-05-05 Partial fix CWE-918

TI-2016-03145 CVE-2016-3715 · GHSA-vmpp-w9w7-m326

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote…

HIGH 82KEV

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.75307 Published 2016-05-05 Partial fix CWE-552

TI-2025-35690 CVE-2025-57807 · GHSA-23hg-53q6-hqfg

ImageMagick BlobStream Forward-Seek Under-Allocation

HIGH 75

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00304 Published 2025-09-05 Partial fix · 14.8.2 CWE-122

TI-2025-33094 CVE-2025-53101 · GHSA-qh3h-j545-h8c9

ImageMagick has Stack Buffer Overflow in image.c

HIGH 75

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0095 Published 2025-07-14 Partial fix · 7.1.2-0, 6.9.13-26 +1 CWE-124

TI-2025-33018 CVE-2025-53014 · GHSA-hm4x-r5hc-794f

ImageMagick has Heap Buffer Overflow in InterpretImageFilename

HIGH 75

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2025-07-14 Partial fix · 7.1.2-0, 6.9.13-26 +1 CWE-125

TI-2025-34954 CVE-2025-55298 · GHSA-9ccg-6pjw-x645

ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

HIGH 73

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04683 Published 2025-08-26 Partial fix · 7.1.2-2, 6.9.13-28 +1 CWE-123

TI-2016-04424 CVE-2016-5118 · GHSA-6w95-mr48-gp8c

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows…

HIGH 73

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.49982 Published 2016-06-10 Partial fix

TI-2025-33019 CVE-2025-53015 · GHSA-vmhh-8rxq-fp9g

ImageMagick has XMP profile write that triggers hang due to unbounded loop

HIGH 72

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00832 Published 2025-07-14 Partial fix · 7.1.2-0, 14.7.0 CWE-835

TI-2022-21751 CVE-2022-44268 · GHSA-g5qh-f5rv-grcp

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure.

HIGH 72

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.89855 Published 2023-02-06 Will not fix CWE-200

TI-2021-17364 CVE-2021-40211 · GHSA-hv6g-hv36-gg9f

An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.

HIGH 72

An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00953 Published 2023-08-22 Fixed CWE-369

TI-2025-34836 CVE-2025-55154 · GHSA-qp29-wxp5-wh82

ImageMagick: integer overflows in MNG magnification

HIGH 71

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00951 Published 2025-08-13 Partial fix · 6.9.13-27, 7.1.2-1 +1 CWE-190

TI-2024-27860 CVE-2024-41817

Arbitrary Code Execution in `AppImage` version `ImageMagick`

HIGH 69

ImageMagick is a free and open-source software suite, used for editing and manipulating digital images.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00948 Published 2024-07-29 Fixed in 7.11-36 CWE-427

TI-2023-16997 CVE-2023-34153 · GHSA-7c5r-cghm-f2jx

Command injection in ImageMagick

HIGH 69

A vulnerability was found in ImageMagick.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03135 Published 2023-05-30 Will not fix CWE-77

TI-2022-21750 CVE-2022-44267 · GHSA-78w3-m2fr-9r73

ImageMagick 7.1.0-49 is vulnerable to Denial of Service.

HIGH 68

ImageMagick 7.1.0-49 is vulnerable to Denial of Service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.76581 Published 2023-02-06 Will not fix CWE-404

TI-2026-70673 CVE-2026-108693 · GHSA-92c8-5jfq-j2vj

Uncontrolled search path in ImageMagick on Windows

HIGH 67

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered.

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00236 Published 2026-10-11 No fix listed CWE-427

TI-2026-19294 CVE-2026-23952 · GHSA-5vx3-wx4q-6cj8

ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

HIGH 66

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2026-01-22 Partial fix · 14.10.2 CWE-476

TI-2025-38489 CVE-2025-62171 · GHSA-9pp9-cfwx-54rm

ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems

HIGH 66

ImageMagick is an open source software suite for displaying, converting, and editing raster image files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00809 Published 2025-10-17 Partial fix · 6.9.13-32, 7.1.2-7 +1 CWE-190

TI-2025-34887 CVE-2025-55212 · GHSA-fh55-q5pj-pxgw

ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

HIGH 66

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00996 Published 2025-08-26 Partial fix · 7.1.2-2, 6.9.13-28 +1 CWE-369

TI-2025-34707 CVE-2025-55004 · GHSA-cjc8-g9w8-chfw

ImageMagick: heap-buffer overflow read in MNG magnification with alpha

HIGH 66

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00549 Published 2025-08-13 Partial fix · 7.1.2-1, 14.8.0 CWE-122

TI-2025-33021 CVE-2025-53019 · GHSA-cfh4-9f7v-fhrc

ImageMagick has Memory Leak in magick stream

HIGH 66

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00558 Published 2025-07-14 Partial fix · 7.1.2-0, 6.9.13-26 +1 CWE-125

TI-2023-04914 CVE-2023-5341 · GHSA-gp6r-24h3-qcjv

Imagemagick: heap use-after-free in coders/bmp.c

MEDIUM 63

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00478 Published 2023-11-19 Will not fix CWE-416

TI-2025-34842 CVE-2025-55160 · GHSA-6hgw-6x87-578x

ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

MEDIUM 60

ImageMagick is free and open-source software used for editing and manipulating digital images.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00436 Published 2025-08-13 Partial fix · 6.9.13-27, 7.1.2-1 +1 CWE-758

TI-2018-11689 CVE-2018-16323 · GHSA-q2cj-g3jg-cp49

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when…

MEDIUM 60

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.48888 Published 2018-09-01 Will not fix CWE-200

Open these records in search →

Critical	54
High	243
Medium	564
Low	55
No CVSS	0