« List of all CVEs

CVE-2025-68469

ImageMagick vulnerable to heap-buffer-overflow

Published: 12/18/2025 Last updated: 12/18/2025 Reserved: 12/18/2025

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crashes when processing a crafted TIFF file. Version 7.1.1-14 fixes the issue.

CNA assigner: GitHub_M (a0819718-46f1-4df5-94e2-005712e83aaa) Requested by: n/a

Metrics

Version Score Severity Vector String
4.0 2 Low CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Opam packages affected (2)

conf-libMagickCore ocsigen-start

Products affected (1)

Product Vendor Version
ImageMagick ImageMagick < 6.1.2.21

References (1)