Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: ImageMagick 6.9.13-56 Clear all filters
TI-2026-69528 CVE-2026-105823 · GHSA-74jf-772x-83jq

Security policy bypass in ImageMagick CUT encoder

Priority LOW 10

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00113 Published 2026-10-08 Partial fix · 7.1.2-31, 6.9.13-56 CWE-284
TI-2026-69526 CVE-2026-105404 · GHSA-35jq-x7wg-cpwf

Code injection in ImageMagick PostScript coders

Priority LOW 26

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0025 Published 2026-10-08 Partial fix · 7.1.2-31, 6.9.13-56 CWE-94
TI-2026-69525 CVE-2026-105403 · GHSA-78ww-3q48-4x48

ImageMagick Security Policy Bypass via Coder Domain

Priority LOW 29

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.0013 Published 2026-10-08 Partial fix · 7.1.2-31, 6.9.13-56 CWE-863
TI-2026-69521 CVE-2026-105399 · GHSA-ww95-cchr-f4gr

ImageMagick Denial of Service via MVG Decoder

Priority LOW 36

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a denial of service vulnerability in the MVG decoder caused by a missing limit check.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00305 Published 2026-10-08 Partial fix · 7.1.2-31, 6.9.13-56 CWE-400