Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

ImageMagick Crashes or Leaks Data from Malformed Image Files

DEBIAN-CVE-2026-25987
Summary

ImageMagick, a popular image editing software, has a weakness that could cause it to crash or leak sensitive data if it's given a specially crafted image file. This affects older versions of the software, but a fix is available in newer versions. Update to the latest version to stay secure.

What to do
  • Update debian imagemagick to version 8:7.1.1.43+dfsg1-1+deb13u6.
  • Update debian imagemagick to version 8:7.1.2.15+dfsg1-1.
Affected software
VendorProductAffected versionsFix available
debian imagemagick All versions –
debian imagemagick All versions –
debian imagemagick <= 8:7.1.1.43+dfsg1-1+deb13u6 8:7.1.1.43+dfsg1-1+deb13u6
debian imagemagick <= 8:7.1.2.15+dfsg1-1 8:7.1.2.15+dfsg1-1
Original title
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP imag...
Original description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
osv CVSS3.1 9.1
Published: 24 Feb 2026 · Updated: 13 Mar 2026 · First seen: 10 Mar 2026