CVE-2026-25798Disclosure(imagemagick / imagemagick)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch imagemagick imagemagick systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • imagemagick

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Products
imagemagick

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-24: 2Patch / Workaround · 2026-02-24: 1Technical Details · 2026-02-24: 202-24
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-25798 NULL Pointer Dereference Vulnerability in ImageMagick Enables Remote Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25798

    Post summary

    A NULL pointer dereference in ImageMagick can cause remote denial of service; the post only announces the vulnerability without providing PoC, exploit, or patch details.

    0001047
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-25798 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a NULL pointer dereference in… https://www.cve.org/CVERecord?id=CVE-2026-25798

    Post summary

    ImageMagick CVE-2026-25798 is a NULL pointer dereference vulnerability fixed in versions 7.1.2-15 and 6.9.13-40.

    00000124
    56.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appimagemagickimagemagick---

Explore more