ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC License:...

CVE-2026-109267: Uncontrolled Recursion

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a...

CVE-2026-109282: Access of Resource Using Incompatible Type

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a...

CVE-2026-109281: Out-of-bounds Read

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

CVE-2026-109265: Out-of-bounds Read

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

CVE-2026-109277: Improper Resource Shutdown or Release

ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies...

CVE-2026-109271: Double Free

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused...

CVE-2026-109270: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can repeatedly invoke the -process option with crafted arguments to gradually exhaust memory and degrade...

CVE-2026-109280: NULL Pointer Dereference

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory...

PT-2026-110696

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security...

CVE-2026-105081: Improper Link Resolution Before File Access

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...

PT-2026-110678

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description A memory leak exists in the GIF encoder. This occurs because allocated memory is not released when color quantization—the process of reducing the number...

PT-2026-110687

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description A memory leak exists when using the -process option. By providing specific arguments, an attacker can cause memory allocations to remain unreleased. Repeatedly invoking this option with crafte...

PT-2026-110691

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description A time-of-check time-of-use TOCTOU symlink race occurs when executing a magick script. This allows attackers to bypass the path security policy by swapping a checked path with a symlink during...

PT-2026-110694

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 Description A policy bypass exists in the -script operation caused by missing checks on file descriptor handling. This allows attackers to close file descriptors that were not opened by the current...

CVE-2026-109261: Missing Release of Memory after Effective Lifetime

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and...

PT-2026-110552

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-58 ImageMagick versions prior to 7.1.2-33 Description An issue exists where the software does not properly account for symbolic links during the IsRightsAuthorizedByName security policy check. This allows...

PT-2026-110682

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.1-7 through 7.1.2-31 Description A heap buffer over-read occurs due to incorrect string termination in XMP profiles, which are metadata formats used to describe the creation and history of a digital asset. An attacker...

PT-2026-110693

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description An incomplete cleanup flaw exists in the JNG decoder. When processing specially crafted JNG files, the software fails to remove temporary files. This ca...

CVE-2026-109276: Incomplete Cleanup

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...