Package · Ubuntu

imagemagick

765 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

High 7.5

CVE-2026-46522 Public exploit

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder, a crafted file could cause an infinite loop resulting in CPU exhaustion. Versi…

ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

Jun 10, 2026
High 7.5

CVE-2025-66628 Public exploit

ImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its ReadTIMImage function (coders/tim.c). The code reads wi…

ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

Dec 10, 2025
Critical 9.8

CVE-2023-34152 Public exploit

A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob wi…

imagemagick imagemagick Debian Ubuntu

May 30, 2023
Medium 6.5

CVE-2022-44267 Public exploit EPSS 77%

ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert pro…

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Feb 6, 2023
Medium 6.5

CVE-2022-44268 Public exploit EPSS 90%

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the result…

imagemagick imagemagick imagemagick Debian Ubuntu Alpine

Feb 6, 2023
Unscored —

CVE-2020-29599 Public exploit

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a passw…

imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine

Dec 7, 2020
Unscored —

CVE-2018-16323 Public exploit EPSS 49%

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that h…

imagemagick imagemagick Debian Ubuntu

Sep 1, 2018
Unscored —

CVE-2017-15277 Public exploit EPSS 19%

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when pro…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu Alpine

Oct 12, 2017
Medium 5.5

CVE-2016-3715 Exploited Public exploit EPSS 75%

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary f…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Nov 3, 2021
Unscored —

CVE-2016-3716 Public exploit EPSS 11%

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
Unscored —

CVE-2016-3717 Public exploit EPSS 20%

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files v…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
High 8.4

CVE-2016-3714 Exploited Public exploit EPSS 97%

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Sep 9, 2024
Medium 5.5

CVE-2016-3718 Exploited Public exploit EPSS 76%

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct…

imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu

May 5, 2016
KEV Nov 3, 2021