[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1hMQb4usfqL5x3ci5SlGKCZjSSkGyl3kszEQdewuUMQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":90,"topProductsByCves":104,"seoMetadata":108,"meta":117},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":9,"versionCount":11,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":31},14368,"imagemagick",3,656,1576,"2025-10-17","i",[15,19,26],{"id":16,"product_name":8,"version_count":17,"cve_count":18,"kev_count":9,"last_cve_update":12},80100,1569,655,{"id":20,"product_name":21,"version_count":22,"cve_count":23,"kev_count":24,"last_cve_update":25},80099,"graphicsmagick",6,2,0,"2008-03-05",{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":24,"last_cve_update":30},80101,"libmagick_library",1,"2003-08-07","Imagemagick is a technology vendor with 3 tracked products and 656 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[33,41,49,53,58,62,69,74,80,85],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,"v3.1","High",0.97485,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":47,"epssScore":48},"CVE-2022-44268","ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).","2023-02-06",6.5,"Medium",false,0.89855,{"cveId":50,"description":51,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":47,"epssScore":52},"CVE-2022-44267","ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.",0.76581,{"cveId":54,"description":55,"publishedDate":36,"cvssScore":56,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":57},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",5.5,0.7565,{"cveId":59,"description":60,"publishedDate":36,"cvssScore":56,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":61},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":38,"severity":67,"isKev":47,"epssScore":68},"CVE-2016-5118","The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.","2016-06-10",9.8,"Critical",0.49982,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":47,"epssScore":73},"CVE-2018-16323","ReadXBMImage in coders\u002Fxbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.","2018-09-01",0.49324,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":38,"severity":39,"isKev":47,"epssScore":79},"CVE-2012-1185","Multiple integer overflows in (1) magick\u002Fprofile.c or (2) magick\u002Fproperty.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.","2012-06-05",7.8,0.2789,{"cveId":81,"description":82,"publishedDate":36,"cvssScore":56,"cvssVersion":83,"severity":46,"isKev":47,"epssScore":84},"CVE-2016-3717","The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.","v3.0",0.2044,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":45,"cvssVersion":83,"severity":46,"isKev":47,"epssScore":89},"CVE-2017-15277","ReadGIFImage in coders\u002Fgif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.","2017-10-12",0.19193,[91,96,101],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":59,"description":60,"publishedDate":36,"cvssScore":56,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":61,"cisaVulnName":97,"cisaDateAdded":98,"cisaShortDescription":99,"cisaRequiredAction":100},"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.","Apply updates per vendor instructions.",{"cveId":54,"description":55,"publishedDate":36,"cvssScore":56,"cvssVersion":38,"severity":46,"isKev":4,"epssScore":57,"cisaVulnName":102,"cisaDateAdded":98,"cisaShortDescription":103,"cisaRequiredAction":100},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",[105,106,107],{"id":16,"product_name":8,"version_count":17,"cve_count":18,"kev_count":9,"last_cve_update":12},{"id":20,"product_name":21,"version_count":22,"cve_count":23,"kev_count":24,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":29,"kev_count":24,"last_cve_update":30},{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Imagemagick - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Imagemagick covering 3 products with 656 tracked vulnerabilities including 0 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Imagemagick vulnerabilities, Imagemagick security, Imagemagick CVE, Imagemagick threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Imagemagick KEV, Imagemagick exploited vulnerabilities",{"@context":113,"@type":114,"name":115,"description":110,"url":116},"https:\u002F\u002Fschema.org","Organization","Imagemagick","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fimagemagick",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":12,"generatedAt":118,"apiVersion":119},"2026-10-17T00:40:33.379Z","3.0"]