CVE-2026-25968
Stack Buffer Overflow in ImageMagick msl.c Causes Memory Corruption
Publication date: 2026-02-24
Last updated on: 2026-02-25
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| imagemagick | imagemagick | to 6.9.13-40 (exc) |
| imagemagick | imagemagick | From 7.0.0-0 (inc) to 7.1.2-15 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-25968 is a high-severity stack-based buffer overflow vulnerability in ImageMagick, an open-source software for editing and manipulating digital images.
The vulnerability occurs in the processing of an attribute within the msl.c file, where a long attribute value can overflow a fixed-size stack buffer.
This overflow causes memory corruption through an out-of-bounds write on the stack, which can lead to serious security issues.
It affects versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40, which contain patches to fix this issue.
How can this vulnerability impact me? :
This vulnerability can be exploited remotely over a network without requiring privileges or user interaction.
The impact includes high confidentiality risk, meaning unauthorized access to data is possible.
Additionally, it can cause high availability impact, potentially leading to denial of service by crashing the application.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability is a stack-based buffer overflow in ImageMagick occurring during processing of an attribute in the msl.c file. Detection can involve monitoring for crashes or memory corruption errors related to ImageMagick processes.
One approach is to run ImageMagick with AddressSanitizer enabled to detect stack-buffer-overflow errors during image processing, as the vulnerability triggers out-of-bounds writes on the stack.
Specific commands to detect the vulnerability are not provided in the available resources.
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to upgrade ImageMagick to version 7.1.2-15 or later, or 6.9.13-40 or later, where the vulnerability has been patched.
Avoid processing untrusted or malicious image files with vulnerable versions of ImageMagick to reduce risk until the update is applied.