Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-25794

Опубликовано: 24 фев. 2026
Источник: nvd
CVSS3: 8.2
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. WriteUHDRImage in coders/uhdr.c uses int arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit int, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write. Version 7.1.2-15 contains a patch.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 7.1.2-15 (исключая)

EPSS

Процентиль: 36%
0.0042
Низкий

8.2 High

CVSS3

Дефекты

CWE-122
CWE-190

Связанные уязвимости

CVSS3: 8.2
ubuntu
7 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit `int`, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write. Version 7.1.2-15 contains a patch.

CVSS3: 8.2
redhat
7 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit `int`, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write. Version 7.1.2-15 contains a patch.

CVSS3: 8.2
debian
7 месяцев назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 8.2
redos
3 месяца назад

Уязвимость ImageMagick

CVSS3: 8.2
github
7 месяцев назад

ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

EPSS

Процентиль: 36%
0.0042
Низкий

8.2 High

CVSS3

Дефекты

CWE-122
CWE-190