Heap-based buffer overflow in ImageMagick - CVE-2026-25794

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU123248

Heap-based buffer overflow in ImageMagick - CVE-2026-25794

Published: February 25, 2026


Vulnerability identifier: #VU123248
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-25794
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a boundary error in the "WriteUHDRImage" function in coders/uhdr.c. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.


Affected software

ImageMagick
Debian Linux
Ubuntu
openEuler
Anolis OS
imagemagick (Ubuntu package)
imagemagick (Debian package)
ImageMagick-devel
ImageMagick-debugsource
ImageMagick-debuginfo
ImageMagick-c++-devel
ImageMagick-c++
ImageMagick
ImageMagick-help
ImageMagick-perl
ImageMagick-djvu
ImageMagick-doc
ImageMagick-libs

How to mitigate CVE-2026-25794

Install updates from vendor's website.

ImageMagick - update to 7.1.2-15
imagemagick (Ubuntu package) - addressed in versions 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1
imagemagick (Debian package) - update to 8:7.1.1.43+dfsg1-1+deb13u6
ImageMagick-devel - update to 7.1.2.15-1
ImageMagick-debugsource - update to 7.1.2.15-1
ImageMagick-debuginfo - update to 7.1.2.15-1
ImageMagick-c++-devel - update to 7.1.2.15-1
ImageMagick-c++ - update to 7.1.2.15-1
ImageMagick - update to 7.1.2.15-1
ImageMagick-help - update to 7.1.2.15-1
ImageMagick-perl - update to 7.1.2.15-1
ImageMagick - update to 7.1.2.15-1
ImageMagick-c++ - update to 7.1.2.15-1
ImageMagick-c++-devel - update to 7.1.2.15-1
ImageMagick-devel - update to 7.1.2.15-1
ImageMagick-djvu - update to 7.1.2.15-1
ImageMagick-doc - update to 7.1.2.15-1
ImageMagick-libs - update to 7.1.2.15-1
ImageMagick-perl - update to 7.1.2.15-1

External References

Related Security Bulletins