Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: ImageMagick 6.9.13-56 Clear all filters
TI-2026-63052 CVE-2026-93588 · GHSA-92h2-gvhm-x4qm

ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM

Priority LOW 12

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-476
TI-2026-63051 CVE-2026-93587 · GHSA-4pmj-hc43-8mwx

ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

Priority LOW 21

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, per the upstream advisory, CUBE and HALD) coder: when a specific command line option is supplied, the decoder does not check a co…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00121 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-400
TI-2026-63050 CVE-2026-93586 · GHSA-gv7r-qr7j-6hg7

ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob

Priority LOW 10

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00104 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-416