CVE-2026-25795

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a flaw exists in the ReadSFWImage() function (coders/sfw.c). Specifically, if the creation of a temporary file fails, the read info structure is destroyed before its filename member is accessed, resulting in a NULL pointer dereference and a crash.

Recommendations Update to ImageMagick version 7.1.2-15 or later. Update to ImageMagick version 6.9.13-40 or later.