CVE-2026-25982

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description ImageMagick is software used for editing and manipulating digital images. A heap out-of-bounds read issue exists in the coders/dcm.c module when processing DICOM files with a specific configuration. The decoder loop incorrectly reads bytes per iteration, causing it to read past the end of the allocated buffer. This can lead to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).

Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.