ImageMagick: Heap-use-after-free via XMP profile could result in a crash

Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash...

GHSA-QH5G-Q395-CX4J ImageMagick: Heap-use-after-free via XMP profile could result in a crash

Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash...

GHSA-HC76-7MPC-QJQH ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output through the HTML encoding. An attacker can execute arbitrary code by supplying specially crafted input that is not properly sanitized. Remediation A fix was pushed into the master branch but not y...

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...

GHSA-56M6-8Q75-F2RW ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

An incomplete fix of CVE-2026-49219 could result in a policy bypass...

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

An incomplete fix of CVE-2026-49219 could result in a policy bypass...

ImageMagick: Policy Bypass possible with matrix-backed operations

Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...

GHSA-RVHP-75F6-9JQH ImageMagick: Policy Bypass possible with matrix-backed operations

Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...

GHSA-82MP-VP5C-9PF7 ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

GHSA-C4V7-W88G-M6C4 ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

EUVD-2026-41124

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments...

EUVD-2026-41123

ImageMagick: Infinite Loop in connected-components when providing invalid arguments...

ImageMagick: Infinite Loop in connected-components when providing invalid arguments

When providing invalid arguments to the connected-components option an infinite loop will occur...

EUVD-2026-41122

ImageMagick: Stack Overflow in MVG decoder due to missing depth check...

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...

EUVD-2026-41120

ImageMagick: Use-After-Free in crafted 8BIM when identifying an image...

ImageMagick: Use-After-Free in crafted 8BIM when identifying an image

When identifying an image with a crafted 8BIM profile with a specific format string a use-after-free will occur...