CLSA-2026-1776171379 ImageMagick: Fix of CVE-2025-57803

CVE-2025-57803: fix integer overflow in BMP reader stride computation...

CLSA-2026-1776170814 ImageMagick: Fix of CVE-2025-57803

CVE-2025-57803: fix integer overflow in BMP reader stride computation...

ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image...

EUVD-2026-22104

ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder...

GHSA-FWVM-GGF6-2P4X ImageMagick has a Stack Overflow in DestroyXMLTree()

Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service DoS attack...

EUVD-2026-22110

ImageMagick has a Stack Overflow in DestroyXMLTree...

PT-2026-57430

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A heap buffer overflow occurs during the magnify operation. This issue is triggered when an unrecognized value is provided to the magnify:method, allowing an attacker to perform an out-of-boun...

Linux Distros Unpatched Vulnerability : CVE-2026-33901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-40169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an ou...

PT-2026-54041

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description An off-by-one error exists in morphology validation, which allows out-of-bounds heap buffer reads. An attacker can trigger a heap buffer overflow by providing incorrect morphology parameters,...

Linux Distros Unpatched Vulnerability : CVE-2026-33902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-33900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder...

PT-2026-51784

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description An out-of-bounds access issue exists in the ConnectedComponentsImage function when processing connected-components artifacts with invalid indices. When the connected-components: define specifi...

PT-2026-56439

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A heap buffer overflow occurs in the FTXT encoder because of missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out-of-bounds read by using specially crafted FTX...

Linux Distros Unpatched Vulnerability : CVE-2026-40311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-fr...

Use After Free

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2026-40312

A flaw was found in ImageMagick. A remote attacker could exploit an off-by-one error when processing a specially crafted malicious MSL Magick Scripting Language file. This vulnerability could lead to a denial of service DoS by causing the application to crash, making it unavailable to users...

CVE-2026-40169

A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by providing a specially crafted image file. When ImageMagick processes this image to generate a YAML or JSON output, it can lead to an out-of-bounds heap write, causing the application to crash. This results in a...

CVE-2026-34238

A flaw was found in ImageMagick, a widely used software for image editing. Specifically, an integer overflow occurs during the despeckle operation, which can lead to a heap buffer overflow on 32-bit systems. This vulnerability allows an attacker to cause an out-of-bounds write, potentially...

CVE-2026-33902

A flaw was found in ImageMagick, a software used for editing and manipulating digital images. An attacker can exploit this vulnerability by providing a deeply nested expression to ImageMagick's FX expression parser. This can lead to a stack overflow, causing the process to crash and resulting in ...