Skip to content
OpenAdvisories
Medium WID-SEC-2026-0484 42 CVEs

ImageMagick: Mehrere Schwachstellen

Published Feb 23, 2026 · Updated Oct 25, 2026 · Revision 45 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher definierte Angriffe durchzuführen.

Product

ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.

Vulnerabilities 42

  • High 8.6

    ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy is enforced on the raw filename string before the filesystem resolves it. As a result, …

  • High 8.2

    ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions

    ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multipli…

  • High 8.1

    ImageMagick - Command Injection via SVG Decoder

    ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that …

  • High 7.5

    ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD (Adobe Photoshop) format handler. When processing …

  • High 7.5

    ImageMagick: Infinite loop vulnerability when parsing a PCD file

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while…

  • High 7.5

    Memory allocation with excessive without limits in the internal SVG decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to…

  • High 7.5

    ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary check (`>` instead of `>=`) that allows bypass th…

  • High 7.4

    ImageMagick has stack buffer overflow in FTXT reader via oversized integer field

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a stack-based buffer overflow exists in the ImageMagick FTXT image reader. A crafted FTXT file can cause out-of-bounds writes on the stac…

  • High 7.4

    ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer…

  • Medium 6.5

    ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, an Integer Overflow vulnerability exists in the sun decoder. On 32-bit systems/builds, a carefully crafted image can lead …

  • Medium 6.5

    Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the UIL and XPM image encoder do not validate the pixel index value returned by `GetPixelIndex()` before using it as an ar…

  • Medium 6.5

    ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific c…

  • Medium 6.5

    ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking when processing Huffman-coded data from PCD (Photo CD) files. The decoder conta…

  • Medium 6.5

    ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read, potentially resul…

  • Medium 6.2

    ImageMagick's MSL: Stack overflow in ProcessMSLScript

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-…

  • Medium 6.2

    ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with `IPTCTEXT`. Versions 7.1.2-15 …

  • Medium 6.2

    ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a `continue` statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing pers…

  • Medium 5.9

    ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

    ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped "secure" security policy includes a rule intended to prevent reading/writing from standard streams. However, ImageMagick also supports fd:<n> pseudo-fil…

  • Medium 5.7

    ImageMagick vulnerable to Code injection via PostScript header in ps coders

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript…

  • Medium 5.3

    ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 conta…

  • Medium 5.3

    ImageMagick: Possible memory leak in ASHLAR encoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small …

  • Medium 5.3

    ImageMagick has memory leak in msl encoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in `coders/msl.c`. In the `WriteMSLImage` function of the `msl.c` file, resources are allocated. But th…

  • Medium 5.3

    ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSFWImage()` (`coders/sfw.c`), when temporary file creation fails, `read_info` is destroyed before its `filename` m…

  • Medium 5.3

    ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resul…

  • Medium 5.3

    ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against I…

  • Medium 5.3

    ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV sampling factor validation allows an invalid sampling factor to bypass checks and trigger a division-…

  • Medium 5.3

    ImageMagick has Memory Leak in coders/ashlar.c

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the alloca…

  • Medium 5.3

    ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and…

  • Medium 5.3

    ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the …

  • Medium 5.3

    ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (No…

  • Medium 5.3

    ImageMagick has heap buffer over-read in MAP image decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leadi…

  • Medium 5.3

    ImageMagick's MSL image stack index not refreshed, leading to leaked images.

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing…

  • Medium 5.3

    ImageMagick: Invalid MSL <map> can result in a use after free

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid `<map>` element that causes it to use an image after it has been fre…

  • Medium 5.3

    ImageMagick - Memory Leak in TXT File Processing via Texture Attribute

    ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT fi…

  • Medium 5.1

    ImageMagick: Out of bounds read in multiple coders read raw pixel data

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processin…

  • Low 3.7

    ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding

    ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to inf…

  • Low 3.7

    ImageMagick - Memory Leak in Raw Pixel Data Coders

    ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and…

  • Low 3.7

    ImageMagick - Use-After-Free Write in PDB Decoder

    ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero b…

  • Low 3.7

    ImageMagick - Heap Use-After-Free in Meta Coder

    ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it by processing specially crafted image files, causing a denia…

  • Low 3.7

    ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

    ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potentia…

  • Low 3.3

    ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

    ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a…

  • Unscored —
    CVE-2026-25984 Rejected

    This CVE was assigned in error.

Revision history

  1. #45

    Neue Updates von Debian aufgenommen

  2. #44

    Neue Updates von Ubuntu aufgenommen

  3. #43

    Neue Updates von Amazon und SUSE aufgenommen

  4. #42

    Neue Updates von Ubuntu aufgenommen

  5. #41

    Neue Updates von SUSE aufgenommen

  6. #40

    Neue Updates von Ubuntu aufgenommen

  7. #39

    Neue Updates von openSUSE aufgenommen

  8. #38

    Neue Updates von SUSE aufgenommen

  9. #37

    Neue Updates von SUSE aufgenommen

  10. #36

    Neue Updates von SUSE aufgenommen

  11. #35

    Neue Updates von SUSE aufgenommen

  12. #34

    Neue Updates von openSUSE aufgenommen

  13. #33

    Neue Updates von openSUSE aufgenommen

  14. #32

    Neue Updates von SUSE aufgenommen

  15. #31

    Neue Updates von SUSE und openSUSE aufgenommen

  16. #30

    Neue Updates von SUSE aufgenommen

  17. #29

    Neue Updates von SUSE und Debian aufgenommen

  18. #28

    Neue Updates von CVE, European Union Vulnerability Database und openSUSE aufgenommen

  19. #27

    Referenz(en) aufgenommen: CVE-2026-56362, EUVD-2026-42259

  20. #26

    Neue Updates von Amazon, CVE und Debian aufgenommen

  21. #25

    Neue Updates von SUSE aufgenommen

  22. #24

    Neue Updates von openSUSE aufgenommen

  23. #23

    Neue Updates von openSUSE aufgenommen

  24. #22

    Referenz(en) aufgenommen: CVE-2026-56368, EUVD-2026-38755

  25. #21

    Referenz(en) aufgenommen: CVE-2026-56371, EUVD-2026-38439, CVE-2026-56379, EUVD-2026-38441, CVE-2026-56376, EUVD-2026-38440

References