Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: ImageMagick 7.1.2-31 Clear all filters
TI-2026-63054 CVE-2026-93590 · GHSA-738c-v4gv-hcp2

ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder

Priority LOW 28

ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00387 Published 2026-09-18 Partial fix · 7.1.2-31 CWE-400
TI-2026-63052 CVE-2026-93588 · GHSA-92h2-gvhm-x4qm

ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM

Priority LOW 12

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00271 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-476
TI-2026-63051 CVE-2026-93587 · GHSA-4pmj-hc43-8mwx

ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

Priority LOW 21

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD (and, per the upstream advisory, CUBE and HALD) coder: when a specific command line option is supplied, the decoder does not check a co…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00121 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-400
TI-2026-63050 CVE-2026-93586 · GHSA-gv7r-qr7j-6hg7

ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob

Priority LOW 10

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00104 Published 2026-09-18 Partial fix · 7.1.2-31, 6.9.13-56 CWE-416