Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: ImageMagick, ImageMagick 6.9.13-55, 7.1.2-30 Clear all filters
TI-2026-59133 CVE-2026-86425 · GHSA-cq4h-xmp2-xr98

ImageMagick before 7.1.2-30 Heap-use-after-free via Layer

Priority LOW 21

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.0015 Published 2026-09-07 Partial fix · 7.1.2-30, 6.9.13-55 CWE-416
TI-2026-59132 CVE-2026-86424 · GHSA-v7f7-cw7c-4cvq

ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race

Priority LOW 10

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00141 Published 2026-09-07 Partial fix · 7.1.2-30, 6.9.13-55 CWE-59
TI-2026-59131 CVE-2026-86423 · GHSA-g684-8gxh-c62w

ImageMagick before 7.1.2-30 Heap-use-after-free via GetList

Priority LOW 21

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00113 Published 2026-09-07 Partial fix · 7.1.2-30, 6.9.13-55 CWE-416
TI-2026-59130 CVE-2026-86422 · GHSA-66p9-q2qw-cpw8

ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

Priority LOW 6

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions.

CVSS 4.0LOW 1.0 Local Low privileges User interaction EPSS 0.00132 Published 2026-09-07 Fixed in 7.1.2-30, 6.9.13-55 CWE-59
TI-2026-59129 CVE-2026-86421 · GHSA-vv85-m77w-hhgx

ImageMagick before 7.1.2-30 Memory Leak via MSL decoder

Priority LOW 28

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00453 Published 2026-09-07 Partial fix · 7.1.2-30, 6.9.13-55 CWE-400
TI-2026-59128 CVE-2026-86420 · GHSA-7xg2-fjfx-cprr

ImageMagick before 7.1.2-30 Denial of Service Memory Budget

Priority LOW 28

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00321 Published 2026-09-07 Partial fix · 7.1.2-30, 6.9.13-55 CWE-400