PT-2026-21631 · Unknown+1 · Imagemagick+1

·

CVE-2026-25971

·

Published

2026-02-24

·

Updated

2026-07-30

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. A flaw exists where the software does not properly check for circular references between two MSLs, potentially leading to a stack overflow.
Recommendations Update to ImageMagick version 7.1.2-15 or later. Update to ImageMagick version 6.9.13-40 or later.

Exploit

Fix

DoS

Memory Corruption

Uncontrolled Recursion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09435
CVE-2026-25971
ECHO-D054-D7F7-7F24
GHSA-8MPR-6XR2-CHHC
JLSEC-2026-958
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
SUSE-SU-2026:1202-1

Affected Products

Imagemagick
Red Os