CVE-2026-25897

A flaw was found in ImageMagick. An integer overflow vulnerability in the sun decoder allows a remote attacker to cause an out-of-bounds heap write by processing a carefully crafted image. This issue primarily affects 32-bit systems and builds, potentially leading to a denial of service.

This MODERATE impact vulnerability in ImageMagick's sun decoder can lead to an out-of-bounds heap write on 32-bit systems when processing a specially crafted image. Red Hat Enterprise Linux 6 ELS and 7 ELS, which support 32-bit architectures, are potentially affected if ImageMagick is used to process untrusted image files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, avoid processing untrusted or maliciously crafted image files with ImageMagick on 32-bit systems. Limiting the sources of image files processed by ImageMagick can reduce the risk of exploitation.