Medium
CVE-2026-25987
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 154
Reset filters
High
CVE-2026-25985
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
Medium
CVE-2026-25983
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Medium
CVE-2026-25969
Image Magick has a Memory Leak in coders/ashlar.c
High
CVE-2026-25965
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
Medium
CVE-2026-25897
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
Medium
CVE-2026-25799
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
Medium
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
Medium
CVE-2026-25796
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
Medium
CVE-2026-25795
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
High
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
Medium
CVE-2026-25638
ImageMagick has memory leak in msl encoder
Medium
CVE-2026-25637
ImageMagick: Possible memory leak in ASHLAR encoder
Medium
CVE-2026-25576
ImageMagick: Out of bounds read in multiple coders read raw pixel data
High
CVE-2026-24485
ImageMagick: Infinite loop vulnerability when parsing a PCD file
Medium
CVE-2026-24484
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
Medium
CVE-2026-23952
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
Medium
CVE-2026-56364
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
Medium
CVE-2026-23874
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
Medium
CVE-2026-22770
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
Medium
CVE-2025-68950
ImageMagick's failure to limit MVG mutual causes Stack Overflow
Medium
CVE-2025-62594
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Low
CVE-2025-57807
ImageMagick BlobStream Forward-Seek Under-Allocation
High
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.