CVE-2025-69204
Medium · 5.3CVSS
5.3
EPSS
0.6%
Published
Dec 30, 2025
CISA due date
—
The record
ImageMagick converting a malicious MVG file to SVG caused an integer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | imagemagick-6 | 0 | 0 |
| Chainguard | imagemagick-6-dev | 0 | 6.9.13.37-r0 |
| Chainguard | imagemagick-6-doc | 0 | 6.9.13.37-r0 |
| Chainguard | imagemagick-6-static | 0 | 6.9.13.37-r0 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | ImageMagick | 0 | 7.1.1.43-150700.3.30.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP7 | ImageMagick | 0 | 7.1.1.43-150700.3.30.1 |
| openSUSE:Leap 15.6 | ImageMagick | 0 | 7.1.1.21-150600.3.35.1 |
| openSUSE:Leap 16.0 | ImageMagick | 0 | 7.1.2.0-160000.5.1 |
| openSUSE:Tumbleweed | ImageMagick | 0 | 7.1.2.12-1.1 |
Related vulnerabilities
- CVE-2026-23952 ImageMagick is free and open-source software used for editing and manipulating digital… Also affects imagemagick-6
- GHSA-9vj4-wc7r-p844 ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript Also affects imagemagick-6
- CVE-2026-23874 ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript Also affects imagemagick-6
- GHSA-39h3-g67r-7g3c ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails Also affects imagemagick-6
- CVE-2026-22770 ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails Also affects imagemagick-6
- GHSA-7rvh-xqp3-pr8j ImageMagick's failure to limit MVG mutual causes Stack Overflow Also affects imagemagick-6
- GHSA-p27m-hp98-6637 ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack Also affects imagemagick-6
- CVE-2025-68618 ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack Also affects imagemagick-6