CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,342 CVEs published, 273 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,342
Show in the list
Critical, last 7 days
273
Show in the list
Healthcare-tagged, last 7 days
8
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product imagemagick:imagemagick. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

246 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2016-3718
Known exploited
Medium 5.5The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Assigned by redhat
May 5, 2016
CVE-2016-3715
Known exploited
Medium 5.5The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
Assigned by redhat
May 5, 2016
CVE-2016-3714
Known exploited
High 8.4The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code…
Assigned by redhat
May 5, 2016
CVE-2025-57807Low 3.8ImageMagick BlobStream Forward-Seek Under-Allocation
Assigned by GitHub_M
Sep 5, 2025
CVE-2025-62171Medium 5.9ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
Assigned by GitHub_M
Oct 17, 2025
CVE-2025-62594Medium 4.7ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Assigned by GitHub_M
Oct 27, 2025
CVE-2025-65955Medium 4.9ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
Assigned by GitHub_M
Dec 2, 2025
CVE-2025-66628High 7.5ImageMagick is vulnerable to an Integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Assigned by GitHub_M
Dec 10, 2025
CVE-2025-68469Low 2.0ImageMagick vulnerable to heap-buffer-overflow
Assigned by GitHub_M
Dec 18, 2025
CVE-2025-68618Medium 5.3Magick's failure to limit the depth of SVG file reads caused a DoS attack.
Assigned by GitHub_M
Dec 30, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .