https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-27799.htmlhttps://patchthecve.com/cve/CVE-2026-27799.htmlWed, 17 Jun 2026 10:27:42 +0000MEDIUM 4.0: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row https://patchthecve.com/cve/CVE-2026-27798.htmlhttps://patchthecve.com/cve/CVE-2026-27798.htmlWed, 17 Jun 2026 10:27:42 +0000MEDIUM 4.0: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 chttps://patchthecve.com/cve/CVE-2026-25637.htmlhttps://patchthecve.com/cve/CVE-2026-25637.htmlWed, 17 Jun 2026 10:24:59 +0000MEDIUM 5.3: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freehttps://patchthecve.com/cve/CVE-2026-25576.htmlhttps://patchthecve.com/cve/CVE-2026-25576.htmlWed, 17 Jun 2026 10:24:53 +0000MEDIUM 5.1: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger https://patchthecve.com/cve/CVE-2026-24485.htmlhttps://patchthecve.com/cve/CVE-2026-24485.htmlWed, 17 Jun 2026 10:23:08 +0000HIGH 7.5: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing thttps://patchthecve.com/cve/CVE-2026-24484.htmlhttps://patchthecve.com/cve/CVE-2026-24484.htmlWed, 17 Jun 2026 10:23:08 +0000MEDIUM 5.3: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch.https://patchthecve.com/cve/CVE-2026-23952.htmlhttps://patchthecve.com/cve/CVE-2026-23952.htmlWed, 17 Jun 2026 10:22:20 +0000MEDIUM 6.5: ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language) parser when processing <comment> tags before images are loaded. This can lead to DoS attack d