VDB
CVE-2025-62594
CVE-2025-62594
PUBLISHED
CVSS 4.699999809265137 MEDIUM
ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes. This issue has been patched in version 7.1.2-8.
EPSS 0.02% · 4.9th percentile
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.02%
4.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NuGet | Magick.NET-Q8-OpenMP-arm64 | 0 |
| NuGet | Magick.NET-Q16-x64 | 0 |
| NuGet | Magick.NET-Q8-OpenMP-x64 | 0 |
| NuGet | Magick.NET-Q8-x64 | 0 |
| NuGet | Magick.NET-Q16-OpenMP-x64 | 0 |
| NuGet | Magick.NET-Q16-HDRI-OpenMP-x64 | 0 |
| NuGet | Magick.NET-Q16-HDRI-OpenMP-arm64 | 0 |
| NuGet | Magick.NET-Q16-HDRI-x64 | 0 |
| imagemagick | imagemagick | 0 |
| NuGet | Magick.NET-Q16-arm64 | 0 |
| NuGet | Magick.NET-Q16-HDRI-arm64 | 0 |
| ImageMagick | ImageMagick | < 7.1.2-8 |
| NuGet | Magick.NET-Q16-OpenMP-arm64 | 0 |
| NuGet | Magick.NET-Q8-arm64 | 0 |
Exploit Intelligence
Timeline
- Oct 26, 2025 CVE Published
- Oct 28, 2025 EPSS Score
- Nov 3, 2025 EPSS Score
- Nov 3, 2025 CVE Updated
- Nov 8, 2025 EPSS Score
- Nov 14, 2025 EPSS Score
- Nov 20, 2025 EPSS Score
- Nov 25, 2025 EPSS Score
- Dec 1, 2025 EPSS Score
- Dec 7, 2025 EPSS Score
- Dec 12, 2025 EPSS Score
- Dec 18, 2025 EPSS Score