Security advisories

medium2026-02-24

CVE-2026-26066-ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

imagemagick/imagemagick · GHSA-v994-63cg-9wj3

high2026-02-24

CVE-2026-25989-ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

imagemagick/imagemagick · GHSA-7355-pwx2-pm84

medium2026-02-24

CVE-2026-25988-ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

imagemagick/imagemagick · GHSA-782x-jh29-9mf7

medium2026-02-24

CVE-2026-25987-ImageMagick has a heap buffer over-read in its MAP image decoder

imagemagick/imagemagick · GHSA-42p5-62qq-mmh7

high2026-02-24

CVE-2026-25985-ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

imagemagick/imagemagick · GHSA-v7g2-m8c5-mf84

medium2026-02-24

CVE-2026-25983-ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

imagemagick/imagemagick · GHSA-fwqw-2x5x-w566

medium2026-02-24

CVE-2026-25969-Image Magick has a Memory Leak in coders/ashlar.c

imagemagick/imagemagick · GHSA-xgm3-v4r9-wfgm

high2026-02-24

CVE-2026-25967-ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field

imagemagick/imagemagick · GHSA-72hf-fj62-w6j4

medium2026-02-24

CVE-2026-25966-ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

imagemagick/imagemagick · GHSA-xwc6-v6g8-pw2h

high2026-02-24

CVE-2026-25965-ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy

imagemagick/imagemagick · GHSA-8jvj-p28h-9gm7

medium2026-02-24

CVE-2026-25898-ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

imagemagick/imagemagick · GHSA-vpxv-r9pg-7gpr

medium2026-02-24

CVE-2026-25897-ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write

imagemagick/imagemagick · GHSA-6j5f-24fw-pqp4

medium2026-02-24

CVE-2026-25799-ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

imagemagick/imagemagick · GHSA-543g-8grm-9cw6

medium2026-02-24

CVE-2026-25798-ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

imagemagick/imagemagick · GHSA-p863-5fgm-rgq4

medium2026-02-24

CVE-2026-25797-ImageMagick: Code Injection via PostScript header in ps coders

imagemagick/imagemagick · GHSA-rw6c-xp26-225v

medium2026-02-24

CVE-2026-25796-ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

imagemagick/imagemagick · GHSA-g2pr-qxjg-7r2w

medium2026-02-24

CVE-2026-25795-ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

imagemagick/imagemagick · GHSA-p33r-fqw2-rqmm

high2026-02-24

CVE-2026-25794-ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

imagemagick/imagemagick · GHSA-vhqj-f5cj-9x8h

medium2026-02-24

CVE-2026-25638-ImageMagick has memory leak in msl encoder

imagemagick/imagemagick · GHSA-gxcx-qjqp-8vjw

high2026-02-24

CVE-2026-23984-Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

apache/superset · GHSA-mwf2-qr4v-94h2