Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-25637

Опубликовано: 24 фев. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 7.1.2-15 (исключая)
Конфигурация 2
cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*
Версия до 14.10.3 (исключая)

EPSS

Процентиль: 16%
0.00051
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch.

CVSS3: 5.3
redhat
около 1 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch.

CVSS3: 5.3
debian
около 1 месяца назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 5.3
github
около 1 месяца назад

ImageMagick: Possible memory leak in ASHLAR encoder

suse-cvrf
19 дней назад

Security update for ImageMagick

EPSS

Процентиль: 16%
0.00051
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-401