By vendor

Imagemagick vulnerabilities

Known CVEs affecting Imagemagick products, prioritized by severity, with SEC.co remediation and detection guidance.

52 published vulnerabilities

• CVE-2026-56379HIGH 8.1

  ImageMagick, a widely-used open-source image processing library, contains a command injection vulnerability in how it handles SVG (Scalable Vector Graphics) files. An attacker can create a malicious SVG file that injects Magick Vector Graphics (MVG) commands, which are then executed during image rendering. This could allow an attacker to run arbitrary code on systems processing untrusted SVG files. The vulnerability affects ImageMagick versions before 7.1.2-15 (version 7.x branch) and before 6.9.13-40 (version 6.x branch).

• CVE-2026-46520HIGH 7.5

  ImageMagick, a widely-used image editing library, contains a memory safety flaw that can crash or destabilize applications when processing multiple images of different sizes. The vulnerability exists in versions before 6.9.13-48 (legacy branch) and 7.1.2-23 (current branch). An attacker can trigger an out-of-bounds write by submitting specially crafted image files, leading to denial of service or potential code execution depending on system configuration and memory layout.

• CVE-2026-46522HIGH 7.5

  ImageMagick, a widely-used image processing library, contains a flaw in its MIFF file decoder that can be triggered by a specially crafted image file. When processed, the vulnerability causes the application to enter an infinite loop, consuming CPU resources until the process is manually stopped or times out. An attacker can exploit this remotely without authentication to degrade or disable image processing services. The vulnerability affects ImageMagick versions prior to 7.1.2.23 (for the 7.x branch) and 6.9.13-48 (for the 6.x branch).

• CVE-2026-49218HIGH 7.5

  ImageMagick, a widely used image editing and manipulation tool, contains a flaw in how it processes DCM (DICOM medical imaging) files. The vulnerability allows specially crafted DCM files with invalid dimensions to pass validation checks, potentially causing the application to crash when performing subsequent operations on the image. This is a denial-of-service issue affecting the availability of systems that rely on ImageMagick for image processing.

• CVE-2026-53460HIGH 7.5

  ImageMagick, a widely-used open-source image processing library, contains a flaw that allows an attacker to crash applications or services using it by triggering excessive memory allocation. When processing specially crafted image requests, the software fails to validate whether memory requests are reasonable before attempting to fulfill them, leading to out-of-memory conditions. An attacker can exploit this remotely without authentication to deny service to legitimate users.

• CVE-2026-53461HIGH 7.5

  ImageMagick, a widely-used open-source image processing suite, contains a flaw in its ICON file decoder that can trigger an out-of-bounds memory write. When processing a specially crafted ICON file, the decoder's loop logic fails to properly validate boundaries, allowing data to be written beyond allocated heap memory. This results in application crashes and potential memory corruption. The vulnerability affects ImageMagick versions prior to 6.9.13-50 (legacy branch) and 7.1.2-25 (current branch).

• CVE-2026-53466MEDIUM 6.5

  ImageMagick, a widely-used image editing and manipulation library, contains an integer overflow flaw in its XCF (GIMP native format) decoder. When processing a specially crafted XCF file, the overflow can trigger an out-of-bounds memory read, potentially crashing the application. The vulnerability affects ImageMagick versions before 6.9.13-51 and 7.1.2-26. While the immediate risk is denial of service through application crashes, the out-of-bounds read could theoretically expose sensitive information from adjacent memory regions.

• CVE-2026-46523MEDIUM 6.2

  ImageMagick, widely used image processing software, contains a memory safety defect that can be triggered when processing specially crafted MSL (Magick Scripting Language) image files. The vulnerability allows an attacker with local file access to cause the application to crash or potentially execute code by manipulating freed memory. This affects both the maintained 7.x branch and the legacy 6.x branch before specific patch versions.

• CVE-2026-46557MEDIUM 6.2

  ImageMagick, a widely-used image editing and manipulation library, contains a stack overflow vulnerability in its fx (effects) operation. When processing specially crafted input, the affected code fails to validate recursion depth, allowing an attacker to exhaust the stack and crash the application or potentially execute arbitrary code. The vulnerability affects all versions before 7.1.2-23 and can be triggered locally without user interaction or special privileges.

• CVE-2026-53465MEDIUM 6.2

  ImageMagick, a widely-used image editing and manipulation tool, contains a memory corruption vulnerability in versions before 7.1.2-25. When processing specially crafted multi-frame images using the SF3 encoder, the software can write data beyond allocated memory boundaries, potentially causing application crashes or system instability. This is a local vulnerability requiring no special privileges or user interaction to trigger.

• CVE-2026-48994MEDIUM 5.9

  ImageMagick, widely used for image processing across web services and automation workflows, contains a flaw in how it handles MAT image files on 32-bit systems. When processing certain MAT files, the software fails to properly validate a function's return value, allowing an attacker to write data past the intended memory boundary. This heap buffer overwrite can crash the application or potentially allow code execution, though the latter is not guaranteed due to the attack complexity required.

• CVE-2026-53462MEDIUM 5.9

  ImageMagick, a widely-used open-source tool for image manipulation, contains a memory safety flaw that can crash applications processing certain malformed images. When the software attempts to allocate memory during image validation and that allocation fails, it may continue to use memory that has already been freed, leading to a denial of service. The issue affects ImageMagick versions prior to 6.9.13-50 (legacy branch) and 7.1.2-25 (current branch).

• CVE-2026-55577MEDIUM 5.9

  ImageMagick, a widely used open-source image manipulation library, contains a heap buffer overflow vulnerability in its MVG (Magick Vector Graphics) decoder. When processing specially crafted images, the decoder can write data beyond allocated memory boundaries, potentially causing the application to crash or become unstable. This flaw affects versions before 6.9.13-51 (legacy branch) and 7.1.2-26 (current branch).

• CVE-2026-45359MEDIUM 5.7

  ImageMagick, a widely-used image editing library, contains a memory safety flaw in its connected components operation. When the connected-components:keep-top parameter receives an invalid value, the software can read beyond allocated memory boundaries. While the vulnerability requires specific input conditions and local system access, it may allow an attacker to extract sensitive data or crash the application. Versions 6.9.13-48 and 7.1.2-22 patch this issue.

• CVE-2026-47166MEDIUM 5.7

  ImageMagick, a widely-used image editing tool, contains a memory safety flaw in its distributed caching service. An attacker with local access who can connect to the magick -distribute-cache service can trigger the server to read beyond allocated heap memory, potentially exposing sensitive data or causing a denial of service. The vulnerability affects versions before 6.9.13-48 (legacy branch) and 7.1.2-23 (current branch).

• CVE-2026-46521MEDIUM 5.5

  ImageMagick, a widely-used open-source image manipulation library, contains a flaw in its LZMA compression handling within the MIFF encoder. When processing specially crafted image files, the software can write data beyond allocated memory boundaries, potentially crashing the application or corrupting system memory. This vulnerability affects versions prior to 6.9.13-48 (legacy branch) and 7.1.2-23 (current branch).

• CVE-2026-48724MEDIUM 5.5

  ImageMagick versions before 7.1.2-24 contain a memory corruption flaw triggered when processing images that use a mask combined with the Floyd-Steinberg dithering algorithm. The vulnerability allows an attacker to overwrite heap memory in negative offsets, potentially causing the application to crash. An attacker would need to trick a user into opening a specially crafted image file, making this a local attack that depends on user interaction.

• CVE-2026-48734MEDIUM 5.5

  ImageMagick, a widely-used open-source image manipulation tool, contains a stack overflow vulnerability when processing specially crafted MVG (Magick Vector Graphics) files. An attacker can create a malicious MVG file that, when opened by a user in ImageMagick, causes the application to crash or become unresponsive. This occurs because the software fails to properly limit recursion depth or track which parts of the file it has already processed, allowing unbounded stack consumption. The vulnerability requires user interaction—someone must explicitly open the malicious file—but no special privileges are needed.

• CVE-2026-49219MEDIUM 5.5

  ImageMagick, widely used for image processing and manipulation, contains a vulnerability that allows a local attacker with login privileges to bypass security policies and read files that should be restricted. The flaw stems from improper handling of filenames, specifically when symlinks are involved. An attacker could exploit this to circumvent the policy restrictions ImageMagick enforces. This is not a remote vulnerability—it requires local system access and user-level permissions.

• CVE-2026-55510MEDIUM 5.5

  ImageMagick, a widely-used open-source image processing library, contains a use-after-free vulnerability triggered when the application processes a specially crafted 8BIM profile embedded in an image file. An attacker can exploit this by distributing a malicious image that, when opened or processed by ImageMagick, causes the application to crash or become unstable. The vulnerability affects versions prior to 6.9.13-51 (legacy branch) and 7.1.2-26 (current branch).

• CVE-2026-55597MEDIUM 5.5

  ImageMagick, widely used for image processing tasks, contains a heap buffer overflow vulnerability in its JP2 (JPEG 2000) encoder. When processing specially crafted image files, the software can write data beyond allocated memory boundaries due to improper argument handling. While the vulnerability requires user interaction—someone must open a malicious image—the outcome is a denial of service. The issue affects ImageMagick versions prior to 7.1.2-26 and has been patched in that release.

• CVE-2026-45031MEDIUM 5.3

  ImageMagick, a widely-used open-source image processing tool, contains a vulnerability in its PSD (Photoshop) file decoder that allows an attacker to circumvent resource limits designed to prevent denial-of-service attacks. By crafting a malicious PSD file, an attacker can cause excessive resource consumption during image decoding, potentially disrupting services that rely on ImageMagick to process untrusted image uploads. The vulnerability affects versions prior to 6.9.13-47 and 7.1.2-22, and patches are now available.

• CVE-2026-45358MEDIUM 5.3

  ImageMagick, widely used image processing software, contains an off-by-one error in its meta encoder that allows reading a single byte of memory beyond intended bounds. An unauthenticated attacker can trigger this vulnerability over the network without user interaction, potentially exposing sensitive information from the application's memory. The vulnerability affects ImageMagick versions prior to 6.9.13-47 (legacy branch) and 7.1.2-22 (current branch).

• CVE-2026-45664MEDIUM 5.3

  ImageMagick, a widely-used tool for image processing and manipulation, has a vulnerability in its MNG (Multiple-Image Network Graphics) file handler that allows an attacker to bypass resource limits. By crafting a malicious MNG file with more images than the system's policy allows, an attacker can trigger excessive resource consumption—potentially causing performance degradation or denial of service. The vulnerability affects ImageMagick versions before 6.9.13-47 and 7.1.2-22, and has been resolved in those patch versions.

• CVE-2026-53467MEDIUM 5.3

  ImageMagick, a widely-used image editing and manipulation tool, contains a vulnerability in its MNG (Multiple-image Network Graphics) decoder that can leak sensitive memory contents. When processing certain MNG files, part of the image pixel data is not properly initialized, potentially exposing unintended information from the heap memory. An attacker can craft a malicious MNG file that, when processed by a vulnerable ImageMagick instance, causes the application to return heap data as part of the image output. This affects ImageMagick versions prior to 6.9.13-51 (legacy branch) and 7.1.2-26 (current branch).

• CVE-2026-55594MEDIUM 5.3

  ImageMagick, a widely-used open-source image processing toolkit, contains a stack overflow vulnerability in its MVG (Magick Vector Graphics) decoder. When processing a specially crafted image file, the decoder fails to validate recursion depth, allowing the stack to overflow and crash the application. An attacker can exploit this by sending a malicious image to any system running a vulnerable version of ImageMagick, causing a denial of service. The vulnerability affects versions prior to 6.9.13-51 (stable branch) and 7.1.2-26 (development branch).

• CVE-2026-56371MEDIUM 5.3

  ImageMagick, a widely-used image processing library, contains a memory leak when handling specially crafted TXT files that include texture attributes. The vulnerability occurs because the software fails to properly clean up memory allocated during texture processing when a subsequent operation fails, causing memory to be progressively consumed with each malicious file processed. An attacker can exploit this by sending or hosting a crafted TXT file that, when processed by a vulnerable ImageMagick installation, exhausts available memory and causes a denial of service.

• CVE-2026-42326MEDIUM 5.1

  ImageMagick, a widely-used open-source tool for image processing, contains a flaw that allows a specially crafted image file to trigger an out-of-bounds memory read when the application writes IPTC metadata. An attacker who provides a malicious image could cause the software to read one byte of memory it shouldn't access, potentially leaking sensitive information or causing the application to crash. This is a local issue—the attacker must be able to supply the image file to a system running vulnerable ImageMagick.

• CVE-2026-45624MEDIUM 5.1

  ImageMagick, a widely used image editing library, contains an out-of-bounds memory read vulnerability in its polynomial distortion feature. When processing specially crafted image transformation arguments, the software reads 24 bytes of memory beyond the intended buffer boundary. This can expose sensitive data from the application's memory space. The vulnerability affects versions prior to 6.9.13-47 (legacy branch) and 7.1.2-22 (current branch) and has been patched in those releases.

• CVE-2026-48733MEDIUM 4.7

  ImageMagick, widely used for image editing and manipulation across web applications and server environments, contains a flaw that can trigger an infinite loop when processing specially crafted images during subimage-search operations. An attacker who tricks a user into opening a malicious image file can cause the application to hang indefinitely, disrupting availability. This is not a memory corruption or data theft vulnerability, but a denial-of-service condition that freezes the process.

• CVE-2026-55595MEDIUM 4.7

  ImageMagick, a widely used image processing tool, contains a flaw that causes it to enter an infinite loop when given malformed input to its connected-components feature. An attacker could exploit this by crafting a specially formed image file or command that triggers the loop, effectively freezing the application and making it unavailable until forcibly stopped. The issue affects ImageMagick versions prior to 6.9.13-51 (legacy branch) and 7.1.2-26 (current branch).

• CVE-2026-53463MEDIUM 4.3

  ImageMagick, a widely-used open-source image editing library, has a vulnerability in its distort operation that can cause the application to crash when given malformed parameters. The issue stems from improper handling of null pointers—a memory safety problem that occurs before the software attempts to process the distort command. Users who interact with untrusted images or accept image files from external sources face potential denial-of-service risk, though the vulnerability does not compromise data confidentiality or integrity.

• CVE-2026-46692MEDIUM 4.1

  ImageMagick, a widely-used image manipulation tool, contains a heap buffer overwrite vulnerability in its distributed cache service. An attacker with local access to the cache service can trigger the flaw to crash the service, causing a denial of service. The vulnerability affects ImageMagick versions before 6.9.13-48 (legacy branch) and 7.1.2-23 (current branch). While the attack requires local connectivity to the cache daemon and elevated privileges, the impact is confined to availability—not confidentiality or integrity.

• CVE-2026-46693MEDIUM 4.1

  ImageMagick, a widely-used open-source image manipulation suite, contains a race condition vulnerability in its distributed cache service. An attacker with local access to a system running the magick -distribute-cache service can exploit a timing window to hijack a file descriptor belonging to the server process, potentially gaining unauthorized read access to sensitive data the server is handling. This is a local privilege escalation scenario requiring both network access to the cache service and precise timing to trigger.

• CVE-2026-47165MEDIUM 4.1

  ImageMagick, a widely-used open-source image manipulation tool, contained a flaw in how its distributed pixel cache system authenticated connections. The distributed pixel cache feature, which allows ImageMagick instances to share pixel data across systems, did not require proper authentication before versions 6.9.13-48 and 7.1.2-23. An attacker with high privileges on the same system could potentially read sensitive pixel data—such as confidential images being processed—without authorization. This is a local-only issue affecting system administrators and environments where multiple users or services share the same ImageMagick installation.

• CVE-2026-46559MEDIUM 4.0

  ImageMagick, a widely used open-source image editing tool, contains a flaw in how it validates JP2 (JPEG 2000) image files. When processing certain malformed JP2 files, the software writes a single byte of data beyond the boundaries of an allocated memory region. While limited to overwriting one byte, this heap buffer overflow could cause the application to crash or, in specific configurations, enable an attacker to influence program behavior. The issue affects ImageMagick versions before 6.9.13-48 and 7.1.2-23.

• CVE-2026-53464MEDIUM 4.0

  ImageMagick versions before 7.1.2-25 leak a small amount of memory when the wand option parser receives invalid input. An attacker with local access could trigger this repeatedly to consume system memory and degrade performance or cause denial of service. The issue is low-impact but present in all affected versions.

• CVE-2026-56365LOW 3.7

  ImageMagick versions before 7.1.2-19 contain a memory leak in their PNG encoder when processing MNG (Multiple-image Network Graphics) files. An attacker can craft a malicious MNG image that triggers a failure condition in the encoder, causing the application to leak memory repeatedly. If an ImageMagick instance processes many such images without restarting, available memory will eventually be exhausted, causing the service to become unresponsive or crash—a denial-of-service condition. This is a low-severity issue because it requires specific conditions to be met and does not allow unauthorized access or data compromise.

• CVE-2026-56367LOW 3.7

  ImageMagick, a widely-used image processing library, contains an integer overflow vulnerability in its PSD (Photoshop) file parser. When processing a malformed PSB (large document) file, the RLE decompression routine can miscalculate buffer sizes, leading to out-of-bounds memory reads. This primarily affects 32-bit builds and can result in information disclosure (leaking nearby memory) or application crashes. The attack requires no user interaction and can be triggered remotely by sending a crafted PSB file.

• CVE-2026-56368LOW 3.7

  ImageMagick versions before 7.1.2-15 contain a memory leak flaw in the image processing code that handles raw pixel data. When processing specially crafted images, the software fails to release memory properly, allowing attackers to exhaust available system memory and cause the application to become unresponsive or crash. This is a network-accessible denial-of-service vector that requires no authentication or user interaction to trigger.

• CVE-2026-56369LOW 3.7

  ImageMagick before version 7.1.2-22 has a weakness in how it encrypts images using the PasskeyEncipherImage method. The vulnerability stems from reusing the same nonce (a number meant to be used only once) with AES-CTR encryption. When nonces are reused in stream ciphers like AES-CTR, attackers can mathematically recover the original unencrypted image data without knowing the encryption key. This is a cryptographic weakness rather than a traditional code execution flaw, but it completely undermines the confidentiality protection that encryption is supposed to provide.

• CVE-2026-56373LOW 3.7

  ImageMagick versions before 7.1.2-15 have a memory handling defect in the PDB (Photoshop Document) decoder. When the decoder encounters memory allocation failures, it continues using a pointer that no longer points to valid memory. Attackers can craft malicious PDB files to trigger this condition, causing the application to crash or potentially write a single zero byte to freed memory regions.

• CVE-2026-56376LOW 3.7

  ImageMagick versions before 7.1.2-15 and 6.9.13-40 contain a memory safety flaw in the meta coder component. When processing certain crafted image files, the application may attempt to write data to memory that has already been freed, especially when internal memory allocation fails. An attacker can exploit this by sending specially designed images to trigger the flaw remotely, causing the ImageMagick process to crash and denying service to legitimate users.

• CVE-2026-56378LOW 3.7

  ImageMagick versions before 7.1.2-15 and 6.x before 6.9.13-40 contain a flaw in how they process PCD (Kodak Photo CD) image files. When a specially crafted PCD file is decoded, the application reads one byte beyond the allocated heap memory region. This can cause the application to crash (denial of service) or leak a single byte of nearby memory, which could potentially contain sensitive data. The vulnerability requires a user or system to open a malicious PCD file to trigger the issue.

• CVE-2026-56361LOW 3.3

  ImageMagick versions before 7.1.2-19 contain a subtle off-by-one error in how they validate morphology parameters. This flaw allows attackers to read data from a single memory location just outside the intended buffer boundary. An attacker would need to craft a malicious image or morphology parameter and have a local user open it, potentially leaking a small amount of sensitive information from memory.

• CVE-2026-56362LOW 3.3

  ImageMagick versions before 7.1.2-15 contain a heap buffer overflow vulnerability that occurs when the image processing library reads from memory it hasn't properly allocated. The flaw stems from a sequence of operations where metadata is updated before the pixel cache memory is fully initialized, creating a window where out-of-bounds reads can occur. An attacker with administrative privileges can manipulate memory or disk allocation to trigger this condition, potentially exposing sensitive data from adjacent memory regions.

• CVE-2026-56363LOW 3.3

  ImageMagick versions prior to 7.1.2-22 contain a vulnerability in how they process binomial kernel values used in image filtering operations. When an attacker supplies an unusually large binomial kernel value, the application performs an integer overflow that leads to division by zero, crashing the ImageMagick process. This is a local denial-of-service condition—the attacker needs local access and user interaction to trigger the crash, but the impact is straightforward: service disruption rather than data theft or system compromise.

• CVE-2026-56366LOW 3.3

  ImageMagick versions before 7.1.2-18 have a memory leak flaw in how they process certain image metadata. When an attacker sends a specially crafted APP1JPEG image file, ImageMagick fails to properly release memory, causing it to consume increasing amounts of system resources until the application crashes or becomes unresponsive. This is a local denial-of-service issue that requires user interaction to trigger.

• CVE-2026-56370LOW 3.3

  ImageMagick versions prior to 7.1.2-19 contain a flaw in how they process connected-components image data. When a user or script provides specially crafted connected-components definitions—particularly those with invalid array indices—ImageMagick can attempt to access memory locations outside of allocated buffers. This out-of-bounds access can crash the application (denial of service) or, in certain conditions, potentially allow an attacker to execute arbitrary code. The vulnerability requires local access and user interaction to trigger, making it a lower-risk but still important issue for organizations that process untrusted image data or accept image uploads from external sources.

• CVE-2026-56374LOW 3.3

  ImageMagick versions before 7.1.2-19 have a memory safety bug in how they process FTXT image files. When an attacker crafts a specially designed FTXT file with malformed format data, ImageMagick fails to validate boundaries before reading from memory, potentially crashing the application or exposing data in memory. The vulnerability requires user interaction—someone must open or process the malicious file.

• CVE-2026-56377LOW 3.3

  ImageMagick versions before 7.1.2-24 contain a flaw in how they enforce security policies that govern file operations. An attacker with local access can exploit this weakness to create or truncate files that the security policy should have blocked, potentially allowing them to write data outside the intended sandbox boundaries in conversion services. This is a path traversal issue masked by an incomplete policy validation mechanism.

• CVE-2026-56364LOW 1.9

  ImageMagick versions prior to 7.1.2-13 contain a memory leak in code that processes OpenCL device configuration files. An attacker with write access to ImageMagick's OpenCL cache directory can place a specially crafted XML file with incomplete device elements. When ImageMagick reads this file, the memory leak causes the application to consume increasing amounts of memory until it runs out, rendering the service unavailable. This requires both local file system access and knowledge of where the cache directory is located, significantly limiting real-world attack scenarios.