ImageMagick
Number 68 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: ImageMagick, imagemagick
Total vulnerabilities
265
Critical
0
High
32
Known Exploited
3
Exploit available
4
Network, no login needed
47.9%
Of 263 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 235 | 0 | 23 | 129 | 83 | 0 |
| 2025 | 22 | 0 | 7 | 8 | 7 | 0 |
| 2024 | 1 | 0 | 1 | 0 | 0 | 0 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 1 | 0 | 0 | 1 | 0 | 0 |
| 2020 | 2 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 1 | 0 | 0 | 1 | 0 | 0 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2016 | 3 | 0 | 1 | 2 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| ImageMagick | 264 | 31 |
| imagemagick | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 115 | 13 |
| Missing Release of Memory after Effective Lifetime | 39 | 0 |
| Denial of Service | 18 | 2 |
| Uncontrolled Recursion | 12 | 1 |
| Stack-based Buffer Overflow | 7 | 4 |
| Improper Link Resolution Before File Access ('Link Following') | 6 | 0 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | 6 | 1 |
| Allocation of Resources Without Limits or Throttling | 5 | 2 |
| Divide By Zero | 3 | 0 |
| Information Disclosure | 3 | 0 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | Medium | 75.6% | |
| CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability | Medium | 75.3% | |
| CVE-2016-3714 | imagemagick: Improper Input Validation | High | 97.5% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-123273 | ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder | Medium | 0.3% | |
| CVE-2026-119124 | ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option | Low | 0.1% | |
| CVE-2026-119123 | ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder | Low | 0.4% | |
| CVE-2026-116160 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate | Low | 0.1% | |
| CVE-2026-116159 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option | Low | 0.1% | |
| CVE-2026-116158 | ImageMagick before 7.1.2-33 Memory Leak in magick compare | Low | 0.1% | |
| CVE-2026-116157 | ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading | Low | 0.1% | |
| CVE-2026-116156 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option | Low | 0.1% | |
| CVE-2026-116155 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile | Medium | 0.3% | |
| CVE-2026-116154 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit | Medium | 0.3% |