Open Source ImageMagick

Name: Open Source ImageMagick
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

21critical70high112medium50low

updated 2026-10-28

vulnerabilities (346)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-44268US	medium6.5	89.9% (100th)	Exploit	no fix	2023-02-06	≤ 7.1.0-49
CVE-2022-44267US	medium6.5	76.6% (100th)	Exploit	no fix	2023-02-06	≤ 7.1.0-49
CVE-2026-46522US	—	1.85% (79th)	Exploit	7.1.2-23	2026-06-10	2 versions
CVE-2025-66628US	—	0.51% (43rd)	Exploit	7.1.2-10	2025-12-10	< 7.1.2-10
CVE-2025-55298US	high8.8	4.68% (92nd)	—	6.9.13-28	2025-08-26	2 versions
CVE-2017-13139US	critical9.8	3.82% (90th)	—	no fix	2017-08-23	≤ 7.0.6-5
CVE-2019-7397US	high7.5	3.80% (90th)	—	7.0.8-25	2019-02-05	< 7.0.8-25
CVE-2019-7398US	high7.5	3.72% (90th)	—	7.0.8-25	2019-02-05	< 7.0.8-25
CVE-2019-19948US	critical9.8	3.68% (90th)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2019-7396US	high7.5	3.50% (89th)	—	7.0.8-25	2019-02-05	< 7.0.8-25
CVE-2019-7395US	high7.5	3.50% (89th)	—	7.0.8-25	2019-02-05	< 7.0.8-25
CVE-2017-11523US	medium6.5	3.48% (89th)	—	no fix	2017-07-22	≤ 7.0.6-5
CVE-2019-13135US	high8.8	3.28% (88th)	—	7.0.8-50	2019-07-01	< 7.0.8-50
CVE-2018-20467US	medium6.5	3.10% (88th)	—	7.0.8-16	2018-12-26	< 7.0.8-16
CVE-2019-7175US	high7.5	2.94% (87th)	—	7.0.8-25	2019-03-07	< 7.0.8-25
CVE-2018-16750US	medium6.5	2.91% (87th)	—	no fix	2018-09-09	≤ 7.0.7-29
CVE-2017-13143US	high7.5	2.90% (87th)	—	no fix	2017-08-23	≤ 7.0.6-5
CVE-2019-19949US	critical9.1	2.89% (87th)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2019-16709US	medium6.5	2.81% (86th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2017-11639US	medium6.5	2.71% (86th)	—	no fix	2017-07-26	≤ 7.0.6-5
CVE-2017-11640US	medium6.5	2.69% (86th)	—	no fix	2017-07-26	≤ 7.0.6-5
CVE-2019-16712US	medium6.5	2.61% (85th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2019-19951US	critical9.8	2.57% (85th)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2019-16713US	medium6.5	2.48% (85th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2019-16711US	medium6.5	2.48% (85th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2019-16710US	medium6.5	2.48% (85th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2019-16708US	medium6.5	2.48% (85th)	—	no fix	2019-09-23	≤ 7.0.8-43
CVE-2017-12640US	high8.8	2.48% (85th)	—	no fix	2017-08-07	≤ 7.0.6-5
CVE-2019-19953US	critical9.1	2.44% (84th)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2019-17541US	high8.8	2.40% (84th)	—	no fix	2019-10-14	≥ 7.0.8-55
CVE-2019-19950US	critical9.8	2.37% (84th)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2017-9500US	medium6.5	2.33% (83rd)	—	no fix	2017-06-07	≤ 7.0.6-5
CVE-2018-16749US	medium6.5	2.31% (83rd)	—	no fix	2018-09-09	≤ 7.0.7-29
CVE-2019-19952US	critical9.8	2.23% (83rd)	—	no fix	2019-12-24	≤ 7.0.9-7 Q16
CVE-2019-17540US	high8.8	2.13% (82nd)	—	no fix	2019-10-14	≥ 7.0.8-54
CVE-2017-12428US	high7.5	2.10% (82nd)	—	no fix	2017-08-04	≤ 7.0.6-5
CVE-2017-12432US	medium6.5	2.08% (81st)	—	no fix	2017-08-04	≤ 7.0.6-5
CVE-2017-12587US	high8.8	2.03% (81st)	—	no fix	2017-08-06	≤ 7.0.6-5
CVE-2017-13144US	medium6.5	2.01% (81st)	—	no fix	2017-08-23	≤ 7.0.6-5
CVE-2017-11533US	medium6.5	2.01% (81st)	—	no fix	2017-07-23	≤ 7.0.6-5
CVE-2017-11446US	medium6.5	2.00% (81st)	—	no fix	2017-07-19	≤ 7.0.6-5
CVE-2017-12691US	medium6.5	1.93% (80th)	—	no fix	2017-09-01	≤ 7.0.6-5
CVE-2019-13137US	medium6.5	1.89% (79th)	—	7.0.8-50	2019-07-01	< 7.0.8-50
CVE-2017-11537US	medium6.5	1.87% (79th)	—	no fix	2017-07-23	≤ 7.0.6-5
CVE-2019-17547US	high8.8	1.84% (79th)	—	no fix	2019-10-14	≥ 7.0.8-62
CVE-2017-13142US	medium6.5	1.81% (79th)	—	no fix	2017-08-23	≤ 7.0.6-5
CVE-2017-11535US	medium6.5	1.66% (77th)	—	no fix	2017-07-23	≤ 7.0.6-5
CVE-2026-56379US	—	1.64% (76th)	—	6.9.13-40	2026-06-23	2 versions
CVE-2017-12563US	medium6.5	1.63% (76th)	—	no fix	2017-08-05	≤ 7.0.6-5
CVE-2017-13145US	medium6.5	1.57% (75th)	—	no fix	2017-08-23	≤ 7.0.6-5

showing 50 of 346

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime52 CVEs
CWE-190Integer Overflow or Wraparound43 CVEs
CWE-125Out-of-bounds Read40 CVEs
CWE-122Heap-based Buffer Overflow35 CVEs
CWE-787Out-of-bounds Write33 CVEs
CWE-400Uncontrolled Resource Consumption30 CVEs
CWE-416Use After Free26 CVEs
CWE-369Divide By Zero16 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)346 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan