{"schema_version":1,"title":"ImageMagick vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 108 vulnerabilities in ImageMagick: 0 in the last 7 days and 55 in the last 90 days, 3 of them critical and 3 exploited in the wild. The most recent, CVE-2026-93590, was published on 18 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/imagemagick","json_url":"https://junglewise.ai/threats/vendors/imagemagick.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/imagemagick","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":14,"all_time":108,"critical":3,"exploited":3,"last_7_days":0,"last_30_days":11,"last_90_days":55,"last_365_days":100},"latest":[{"cve":"CVE-2026-93590","cvss":3.7,"epss":0.0039,"slug":"cve-2026-93590-imagemagick-policy-bypass-in-uhdr-encoder","title":"ImageMagick policy bypass in UHDR encoder","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:09.943+00:00","url":"https://junglewise.ai/threats/cve-2026-93590-imagemagick-policy-bypass-in-uhdr-encoder"},{"cve":"CVE-2026-93589","cvss":3.7,"epss":0.0035,"slug":"cve-2026-93589-imagemagick-division-by-zero-in-flif-encoder","title":"ImageMagick division by zero in FLIF encoder","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:09.76+00:00","url":"https://junglewise.ai/threats/cve-2026-93589-imagemagick-division-by-zero-in-flif-encoder"},{"cve":"CVE-2026-93588","cvss":3.1,"epss":0.0032,"slug":"cve-2026-93588-imagemagick-null-pointer-dereference-in-pnm-coder","title":"ImageMagick NULL pointer dereference in PNM coder","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:09.59+00:00","url":"https://junglewise.ai/threats/cve-2026-93588-imagemagick-null-pointer-dereference-in-pnm-coder"},{"cve":"CVE-2026-93587","cvss":3.3,"epss":0.0015,"slug":"cve-2026-93587-imagemagick-policy-bypass-in-pcd-cube-and-hald-decoders","title":"ImageMagick policy bypass in PCD, CUBE and HALD decoders","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:09.41+00:00","url":"https://junglewise.ai/threats/cve-2026-93587-imagemagick-policy-bypass-in-pcd-cube-and-hald-decoders"},{"cve":"CVE-2026-93586","cvss":2.9,"epss":0.0014,"slug":"cve-2026-93586-imagemagick-use-after-free-in-imagestoblob","title":"ImageMagick use-after-free in ImagesToBlob","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:09.207+00:00","url":"https://junglewise.ai/threats/cve-2026-93586-imagemagick-use-after-free-in-imagestoblob"},{"cve":"CVE-2026-86425","cvss":3.3,"epss":0.0015,"slug":"cve-2026-86425-imagemagick-heap-use-after-free-in-layer-method-of-perlmagick","title":"ImageMagick heap-use-after-free in Layer method of PerlMagick","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:41.543+00:00","url":"https://junglewise.ai/threats/cve-2026-86425-imagemagick-heap-use-after-free-in-layer-method-of-perlmagick"},{"cve":"CVE-2026-86424","cvss":2.5,"epss":0.0014,"slug":"cve-2026-86424-imagemagick-toctou-race-condition-in-video-decoder","title":"ImageMagick TOCTOU race condition in video decoder","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:41.403+00:00","url":"https://junglewise.ai/threats/cve-2026-86424-imagemagick-toctou-race-condition-in-video-decoder"},{"cve":"CVE-2026-86423","cvss":3.3,"epss":0.0015,"slug":"cve-2026-86423-imagemagick-heap-use-after-free-in-perlmagick-getlist","title":"ImageMagick heap-use-after-free in PerlMagick GetList","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:41.263+00:00","url":"https://junglewise.ai/threats/cve-2026-86423-imagemagick-heap-use-after-free-in-perlmagick-getlist"},{"cve":"CVE-2026-86422","cvss":3.3,"epss":0.0013,"slug":"cve-2026-86422-imagemagick-path-policy-toctou-symlink-race-on-windows","title":"ImageMagick path policy TOCTOU symlink race on Windows","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:41.103+00:00","url":"https://junglewise.ai/threats/cve-2026-86422-imagemagick-path-policy-toctou-symlink-race-on-windows"},{"cve":"CVE-2026-86421","cvss":3.7,"epss":0.0046,"slug":"cve-2026-86421-imagemagick-memory-leak-in-msl-decoder","title":"ImageMagick memory leak in MSL decoder","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:40.963+00:00","url":"https://junglewise.ai/threats/cve-2026-86421-imagemagick-memory-leak-in-msl-decoder"},{"cve":"CVE-2026-86420","cvss":3.7,"epss":0.0046,"slug":"cve-2026-86420-imagemagick-memory-budget-leak-in-openpixelcache","title":"ImageMagick memory budget leak in OpenPixelCache","severity":"low","exploited":false,"published_at":"2026-09-07T13:20:40.827+00:00","url":"https://junglewise.ai/threats/cve-2026-86420-imagemagick-memory-budget-leak-in-openpixelcache"},{"cve":"CVE-2026-64685","cvss":5.3,"slug":"cve-2026-64685-imagemagick-heap-buffer-over-read-in-bgr-decoder","title":"ImageMagick heap buffer over-read in BGR decoder","severity":"medium","exploited":false,"published_at":"2026-07-30T00:16:25.49+00:00","url":"https://junglewise.ai/threats/cve-2026-64685-imagemagick-heap-buffer-over-read-in-bgr-decoder"},{"cve":"CVE-2026-62946","cvss":5.1,"slug":"cve-2026-62946-imagemagick-integer-overflow-in-jnx-decoder","title":"ImageMagick integer overflow in JNX decoder","severity":"medium","exploited":false,"published_at":"2026-07-30T00:16:25.353+00:00","url":"https://junglewise.ai/threats/cve-2026-62946-imagemagick-integer-overflow-in-jnx-decoder"},{"cve":"CVE-2026-62363","cvss":5,"slug":"cve-2026-62363-imagemagick-heap-buffer-overflow-in-fx-operation","title":"ImageMagick heap buffer overflow in fx operation","severity":"medium","exploited":false,"published_at":"2026-07-30T00:16:25.213+00:00","url":"https://junglewise.ai/threats/cve-2026-62363-imagemagick-heap-buffer-overflow-in-fx-operation"},{"cve":"CVE-2026-62343","cvss":4.7,"slug":"cve-2026-62343-imagemagick-heap-buffer-overwrite-in-morphology-operation","title":"ImageMagick heap buffer overwrite in morphology operation","severity":"medium","exploited":false,"published_at":"2026-07-30T00:16:24.2+00:00","url":"https://junglewise.ai/threats/cve-2026-62343-imagemagick-heap-buffer-overwrite-in-morphology-operation"},{"cve":"CVE-2026-66011","cvss":3.3,"slug":"cve-2026-66011-imagemagick-memory-leak-in-magick-cli-via-invalid-options","title":"ImageMagick memory leak in magick CLI via invalid options","severity":"low","exploited":false,"published_at":"2026-07-25T11:17:18.347+00:00","url":"https://junglewise.ai/threats/cve-2026-66011-imagemagick-memory-leak-in-magick-cli-via-invalid-options"},{"cvss":3.7,"slug":"imagemagick-memory-leak-in-icon-decoder-53af0ac5","title":"ImageMagick memory leak in ICON decoder","severity":"low","exploited":false,"published_at":"2026-07-24T15:12:18+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-icon-decoder-53af0ac5"},{"cvss":2.9,"slug":"imagemagick-memory-leak-in-viff-encoder-cbd9cebc","title":"ImageMagick memory leak in VIFF encoder","severity":"low","exploited":false,"published_at":"2026-07-24T15:09:40+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-viff-encoder-cbd9cebc"},{"cvss":3.7,"slug":"imagemagick-memory-leak-in-yuv-decoder-717e069d","title":"ImageMagick memory leak in YUV decoder","severity":"low","exploited":false,"published_at":"2026-07-24T15:09:11+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-yuv-decoder-717e069d"},{"cvss":2.9,"slug":"imagemagick-memory-leak-in-tiff-encoder-5e4b99a7","title":"ImageMagick memory leak in TIFF encoder","severity":"low","exploited":false,"published_at":"2026-07-24T14:35:45+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-tiff-encoder-5e4b99a7"},{"cvss":2.9,"slug":"imagemagick-memory-leak-in-jng-encoder-f9447e3c","title":"ImageMagick memory leak in JNG encoder","severity":"low","exploited":false,"published_at":"2026-07-24T14:35:29+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-jng-encoder-f9447e3c"},{"cvss":2.9,"slug":"imagemagick-memory-leak-in-hough-lines-operation-d8c6ce20","title":"ImageMagick memory leak in hough lines operation","severity":"low","exploited":false,"published_at":"2026-07-24T14:34:46+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-hough-lines-operation-d8c6ce20"},{"cvss":2.9,"slug":"imagemagick-memory-leak-in-tiff-encoder-b3da8985","title":"ImageMagick memory leak in TIFF encoder","severity":"low","exploited":false,"published_at":"2026-07-24T14:30:00+00:00","url":"https://junglewise.ai/threats/imagemagick-memory-leak-in-tiff-encoder-b3da8985"},{"cve":"CVE-2026-61872","cvss":2.5,"slug":"cve-2026-61872-imagemagick-memory-leak-in-tiff-encoder","title":"ImageMagick memory leak in TIFF encoder","severity":"low","exploited":false,"published_at":"2026-07-15T12:18:22.38+00:00","url":"https://junglewise.ai/threats/cve-2026-61872-imagemagick-memory-leak-in-tiff-encoder"},{"cve":"CVE-2026-61871","cvss":3.7,"slug":"cve-2026-61871-imagemagick-memory-leak-in-icon-decoder","title":"ImageMagick memory leak in ICON decoder","severity":"low","exploited":false,"published_at":"2026-07-15T12:18:22.233+00:00","url":"https://junglewise.ai/threats/cve-2026-61871-imagemagick-memory-leak-in-icon-decoder"}],"vendor":{"hub":true,"name":"ImageMagick","slug":"imagemagick","homepage":"https://imagemagick.org","description":"A suite of command-line tools and libraries for creating, editing, and converting raster images.","url":"https://junglewise.ai/threats/vendors/imagemagick"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2016-3714","cvss":8.4,"slug":"cve-2016-3714-imagemagick-improper-input-validation-vulnerability","title":"ImageMagick Improper Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3714-imagemagick-improper-input-validation-vulnerability"},{"cve":"CVE-2016-3715","cvss":5.5,"slug":"cve-2016-3715-imagemagick-arbitrary-file-deletion-vulnerability","title":"ImageMagick Arbitrary File Deletion Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3715-imagemagick-arbitrary-file-deletion-vulnerability"},{"cve":"CVE-2016-3718","cvss":5.5,"slug":"cve-2016-3718-imagemagick-server-side-request-forgery-ssrf-vulnerability","title":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2016-3718-imagemagick-server-side-request-forgery-ssrf-vulnerability"},{"cve":"CVE-2026-25965","cvss":8.6,"epss":0.0075,"slug":"cve-2026-25965-imagemagick-path-traversal-policy-bypass-in-path-security-policy","title":"ImageMagick path traversal policy bypass in path security policy","severity":"high","exploited":false,"published_at":"2026-02-24T02:16:01.167+00:00","url":"https://junglewise.ai/threats/cve-2026-25965-imagemagick-path-traversal-policy-bypass-in-path-security-policy"},{"cve":"CVE-2026-25794","cvss":8.2,"epss":0.0034,"slug":"cve-2026-25794-imagemagick-heap-overflow-in-writeuhdrimage","title":"ImageMagick heap overflow in WriteUHDRImage","severity":"high","exploited":false,"published_at":"2026-02-24T01:16:13.97+00:00","url":"https://junglewise.ai/threats/cve-2026-25794-imagemagick-heap-overflow-in-writeuhdrimage"},{"cve":"CVE-2026-23876","cvss":8.1,"epss":0.0049,"slug":"cve-2026-23876-imagemagick-heap-buffer-overflow-in-xbm-image-decoder","title":"ImageMagick heap buffer overflow in XBM image decoder","severity":"high","exploited":false,"published_at":"2026-01-20T01:15:57.44+00:00","url":"https://junglewise.ai/threats/cve-2026-23876-imagemagick-heap-buffer-overflow-in-xbm-image-decoder"},{"cve":"CVE-2026-28693","cvss":8.1,"epss":0.0024,"slug":"cve-2026-28693-imagemagick-integer-overflow-in-dib-coder","title":"ImageMagick integer overflow in DIB coder","severity":"high","exploited":false,"published_at":"2026-03-10T07:43:44.577+00:00","url":"https://junglewise.ai/threats/cve-2026-28693-imagemagick-integer-overflow-in-dib-coder"},{"cve":"CVE-2026-33901","cvss":7.5,"epss":0.0051,"slug":"cve-2026-33901-imagemagick-heap-buffer-overflow-in-mvg-decoder","title":"ImageMagick heap buffer overflow in MVG decoder","severity":"high","exploited":false,"published_at":"2026-04-13T21:16:25.497+00:00","url":"https://junglewise.ai/threats/cve-2026-33901-imagemagick-heap-buffer-overflow-in-mvg-decoder"},{"cve":"CVE-2025-66628","cvss":7.5,"epss":0.0051,"slug":"cve-2025-66628-imagemagick-is-a-software-suite-to-create-edit-compose-or-convert","title":"ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image p","severity":"high","exploited":false,"published_at":"2025-12-10T22:16:28.66+00:00","url":"https://junglewise.ai/threats/cve-2025-66628-imagemagick-is-a-software-suite-to-create-edit-compose-or-convert"},{"cve":"CVE-2026-33908","cvss":7.5,"epss":0.0047,"slug":"cve-2026-33908-imagemagick-uncontrolled-recursion-in-destroyxmltree-function","title":"ImageMagick uncontrolled recursion in DestroyXMLTree function","severity":"high","exploited":false,"published_at":"2026-04-13T22:16:28.997+00:00","url":"https://junglewise.ai/threats/cve-2026-33908-imagemagick-uncontrolled-recursion-in-destroyxmltree-function"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"ImageMagick","slug":"imagemagick","vulnerabilities":108,"url":"https://junglewise.ai/threats/technologies/imagemagick"}]}