Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV sampling factor validation allows an invalid sampling factor to bypass checks and trigger a division-by-zero during image loading, resulting in a reliable denial-of-service. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25799 ImageMagick Denial-of-Service via Unvalidated YUV Sampling Factor Parsing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25799
Post summary
A new CVE (CVE-2026-25799) for ImageMagick has been disclosed, describing a denial‑of‑service vulnerability caused by unvalidated YUV sampling factor parsing; no PoC, exploit, or patch details are provided.
CVE-2026-25799 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a logic error in YUV sampling… https://www.cve.org/CVERecord?id=CVE-2026-25799
Post summary
CVE-2026-25799 is a logic error in ImageMagick’s YUV sampling; the vulnerability is fixed in versions 7.1.2-15 and 6.9.13-40.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | imagemagick | imagemagick | - | - | - |