p PatchFirst

CVE-2026-25794

CVE-2026-25794 · ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit `int`, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write. Version 7.1.2-15 contains a patch.

CVSS 8.2 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • imagemagick

    Versions
    • < 7.1.2-15: Affected

    No fix published

  • imagemagick Debian:13

    Versions
    • 8:7.1.1.43+dfsg1-1
    • 8:7.1.1.43+dfsg1-1+deb13u1
    • 8:7.1.1.43+dfsg1-1+deb13u2
    • 8:7.1.1.43+dfsg1-1+deb13u3
    • 8:7.1.1.43+dfsg1-1+deb13u4
    • 8:7.1.1.43+dfsg1-1+deb13u5
    Affected ranges
    • ECOSYSTEM: < 8:7.1.1.43+dfsg1-1+deb13u6

    Update to 8:7.1.1.43+dfsg1-1+deb13u6

  • imagemagick Debian:14

    Versions
    • 8:7.1.1.43+dfsg1-1
    • 8:7.1.1.46+dfsg1-1
    • 8:7.1.1.47+dfsg1-1
    • 8:7.1.1.47+dfsg1-2
    • 8:7.1.2.1+dfsg1-1
    • 8:7.1.2.12+dfsg1-1
    • 8:7.1.2.13+dfsg1-1
    • 8:7.1.2.3+dfsg1-1
    • 8:7.1.2.7+dfsg1-1
    • 8:7.1.2.8+dfsg1-1
    Affected ranges
    • ECOSYSTEM: < 8:7.1.2.15+dfsg1-1

    Update to 8:7.1.2.15+dfsg1-1

  • imagemagick Ubuntu:25.10

    Versions
    • 8:7.1.1.43+dfsg1-1
    • 8:7.1.1.43+dfsg1-1ubuntu1
    • 8:7.1.1.43+dfsg1-1ubuntu2
    • 8:7.1.2.3+dfsg1-1
    Affected ranges
    • ECOSYSTEM: < 8:7.1.2.3+dfsg1-1ubuntu0.1

    Update to 8:7.1.2.3+dfsg1-1ubuntu0.1

Original sources

Check your server →