Vendor
ImageMagick
892 known vulnerabilities in products by ImageMagick, 3 of them actively exploited (CISA KEV).
Key figures
892
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
53
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2016-3714 | ImageMagick Improper Input Validation Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability In CISA KEV | 5.5 | |
| Critical | CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability In CISA KEV | 5.5 | |
| Critical | CVE-2016-5118 | GraphicsMagick: Code Execution | 9.8 | |
| Critical | CVE-2023-34152 | ImageMagick: Improper Input Validation | 9.8 | |
| Critical | CVE-2016-5841 | ImageMagick: Integer Overflow | 9.8 | |
| Critical | CVE-2016-5691 | ImageMagick: security vulnerability | 9.8 | |
| Critical | CVE-2016-5690 | ImageMagick: security vulnerability | 9.8 | |
| Critical | CVE-2017-5511 | ImageMagick: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2016-5689 | ImageMagick: security vulnerability | 9.8 | |
| High | CVE-2014-2030 | ImageMagick: Stack-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2016-10145 | ImageMagick: security vulnerability | 9.8 | |
| Critical | CVE-2016-10144 | ImageMagick: security vulnerability | 9.8 | |
| Critical | CVE-2014-9846 | ImageMagick: Buffer Overflow | 9.8 | |
| Critical | CVE-2016-5687 | ImageMagick: Out-of-Bounds Read | 9.8 | |
| Critical | CVE-2014-9847 | ImageMagick: security vulnerability | 9.8 | |
| High | CVE-2012-1185 | ImageMagick: Integer Overflow | 7.8 | |
| High | CVE-2025-55298 | ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution | 7.5 | |
| Critical | CVE-2018-14551 | ImageMagick: Use of Uninitialized Memory | 9.8 | |
| Medium | CVE-2022-44268 | ImageMagick: Information Disclosure | 6.5 | |
| Critical | CVE-2014-9843 | ImageMagick: security vulnerability | 9.8 | |
| Critical | CVE-2014-9841 | ImageMagick: security vulnerability | 9.8 | |
| Medium | CVE-2022-44267 | ImageMagick: Denial of Service | 6.5 | |
| Critical | CVE-2017-13139 | ImageMagick: Out-of-Bounds Read | 9.8 | |
| Critical | CVE-2017-18211 | ImageMagick: NULL Pointer Dereference | 9.8 |
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| ImageMagick | 891 | 3 |