ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes. This issue has been patched in version 7.1.2-8.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Nov 17, 2025 | Oct 27, 2025 |
| Debian | — | Upgrade imagemagick | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 27, 2025 |
| Suse | — | Upgrade ImageMagick-config-7-upstream-secureUpgrade ImageMagick-config-7-upstream-limitedUpgrade imagemagick-config-7-upstreamUpgrade ImageMagickUpgrade libMagick++-7_Q16HDRI5Upgrade libmagickcore-7_q16hdri10-32bitUpgrade libmagick-7_q16hdri5-32bitUpgrade perl-PerlMagickUpgrade libMagick++-develUpgrade ImageMagick-config-7-upstream-openUpgrade ImageMagick-develUpgrade libMagickCore-7_Q16HDRI10Upgrade libmagickwand-7_q16hdri10-32bitUpgrade ImageMagick-extraUpgrade libmagick-devel-32bitUpgrade imagemagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-docUpgrade ImageMagick-config-7-upstream-websafeUpgrade libMagickWand-7_Q16HDRI10 | Dec 5, 2025 | Nov 5, 2025 |
| Ubuntu | — | Upgrade imagemagick | May 25, 2026 | Oct 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub