PT-2026-21631

CVE-2026-25971

·

Published

2026-02-24

·

Updated

2026-07-30

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. A flaw exists where the software does not properly check for circular references between two MSLs, potentially leading to a stack overflow.
Recommendations Update to ImageMagick version 7.1.2-15 or later. Update to ImageMagick version 6.9.13-40 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-8MPR-6XR2-CHHC
CLSA-2026-1777046565
ECHO-D054-D7F7-7F24
JLSEC-2026-958
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
SUSE-SU-2026:1202-1
Found an issue in the description? Have something to add? Feel free to write us 👾