7.5
High
CVE-2026-25985 ImageMagick is free and open-source software used for editing and manipulating digital images
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| ImageMagick 7.0 | 7.0.0 → < 7.1.2-15 | 7.1.2-15 |
| ImageMagick 6.9 | earliest → < 6.9.13-40 | 6.9.13-40 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux Server (v. 7 ELS)
The 214 CVEs of Red Hat Enterprise Linux Server (v. 7 ELS) →
CVE-2026-56379
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…
9.2
Critical
CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
7.6
High
CVE-2026-12329
Memory safety bug fixed in Thunderbird ESR 140.12
5.3
Medium
CVE-2026-12328
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…
8.1
High