VDB

CESS-2026-25971

CESS-2026-25971 PUBLISHED CVSS 9.8 CRITICAL

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

Risk Scores

CVSS 3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

  • Feb 23, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›