Cloudanix VulnDB

CVE-2026-25987

Medium · 5.3

CVSS

5.3

EPSS

0.5%

Published

Feb 24, 2026

CISA due date

—

The record

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

Affected packages

Ecosystem Package Introduced Fixed
NuGet Magick.NET-Q16-AnyCPU 0 14.10.3
NuGet Magick.NET-Q16-HDRI-AnyCPU 0 14.10.3
NuGet Magick.NET-Q16-HDRI-OpenMP-arm64 0 14.10.3
NuGet Magick.NET-Q16-HDRI-OpenMP-x64 0 14.10.3
NuGet Magick.NET-Q16-HDRI-arm64 0 14.10.3
NuGet Magick.NET-Q16-HDRI-x64 0 14.10.3
NuGet Magick.NET-Q16-HDRI-x86 0 14.10.3
NuGet Magick.NET-Q16-OpenMP-arm64 0 14.10.3
NuGet Magick.NET-Q16-OpenMP-x64 0 14.10.3
NuGet Magick.NET-Q16-OpenMP-x86 0 14.10.3
NuGet Magick.NET-Q16-arm64 0 14.10.3
NuGet Magick.NET-Q16-x64 0 14.10.3
NuGet Magick.NET-Q16-x86 0 14.10.3
NuGet Magick.NET-Q8-AnyCPU 0 14.10.3
NuGet Magick.NET-Q8-OpenMP-arm64 0 14.10.3
NuGet Magick.NET-Q8-OpenMP-x64 0 14.10.3
NuGet Magick.NET-Q8-arm64 0 14.10.3
NuGet Magick.NET-Q8-x64 0 14.10.3
NuGet Magick.NET-Q8-x86 0 14.10.3
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 ImageMagick 0 7.1.1.43-150700.3.37.1
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Module for Development Tools 15 SP7 ImageMagick 0 7.1.1.43-150700.3.37.1
SUSE:Linux Enterprise Server 15 SP4-LTSS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Server 15 SP5-LTSS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Server 15 SP6-LTSS ImageMagick 0 7.1.1.21-150600.3.42.2
SUSE:Linux Enterprise Server 15 SP6-LTSS ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 ImageMagick 0 6.8.8.1-71.231.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 ImageMagick 0 7.1.0.9-150400.6.68.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 ImageMagick 0 7.1.1.21-150600.3.42.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 ImageMagick 0 7.1.0.9-150400.6.68.2
openSUSE:Leap 15.6 ImageMagick 0 7.1.1.21-150600.3.42.2
openSUSE:Leap 16.0 ImageMagick 0 7.1.2.0-160000.6.1
openSUSE:Tumbleweed ImageMagick 0 7.1.2.15-1.1

Related vulnerabilities