CVE-2025-69204

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A remote attacker can exploit this vulnerability by providing a specially crafted SVG (Scalable Vector Graphics) image. An integer overflow occurs in the WriteSVGImage function when storing number_attributes, which subsequently triggers a buffer overflow. This can lead to a Denial of Service (DoS) attack, making the software unavailable.

This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service in ImageMagick. A remote attacker can exploit this flaw by providing a specially crafted SVG image, triggering an integer overflow and subsequent buffer overflow during image processing. This can render the ImageMagick software unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid processing untrusted SVG images with ImageMagick. If processing untrusted content is unavoidable, consider isolating ImageMagick operations within a sandboxed environment to limit potential impact.