- How many CVEs does ImageMagick have?
- ImageMagick has 814 published CVE records since 2003, including 167 in the last two years.
- How many ImageMagick CVEs are in CISA KEV?
- Yes — 3 of ImageMagick's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which ImageMagick products have the most CVEs?
- The ImageMagick products with the most published CVEs are ImageMagick, imagemagick6, ImageMagick 7.x, ImageMagick 7.x < 7.0.1-1, ImageMagick 6.x.
- What are the most common weakness types in ImageMagick CVEs?
- ImageMagick's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-122 (Heap-based Buffer Overflow), CWE-401 (Missing Release of Memory after Effective Lifetime), CWE-125 (Out-of-bounds Read).
- Are there public exploits for ImageMagick vulnerabilities?
- Yes — 41 of ImageMagick's CVEs have a known public exploit.
- How many critical ImageMagick vulnerabilities are there?
- ImageMagick has 55 critical and 236 high-severity CVEs.
- What is the average severity of ImageMagick CVEs?
- The average CVSS base score across ImageMagick's scored CVEs is 6.7.