PT-2026-21604 · Unknown+3 · Imagemagick+3

·

CVE-2026-25798

·

Published

2026-02-01

·

Updated

2026-07-30

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. A NULL pointer dereference in ClonePixelCacheRepository can allow a remote attacker to crash applications linked against ImageMagick by providing a specially crafted image file, leading to a denial of service.
Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.

Exploit

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-06709
CVE-2026-25798
ECHO-BAA9-B0DD-7FD5
GHSA-P863-5FGM-RGQ4
JLSEC-2026-948
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
USN-8127-1
USN-8263-1

Affected Products

Imagemagick
Linuxmint
Red Os
Ubuntu