CVE-2026-25989

A flaw was found in ImageMagick, a software used for editing and manipulating digital images. A remote attacker could exploit an off-by-one boundary check vulnerability by providing a specially crafted SVG (Scalable Vector Graphics) file. This could lead to a denial of service (DoS) condition, making the software unavailable to legitimate users.

This is a MODERATE impact flaw in ImageMagick that could lead to a denial of service when processing a specially crafted SVG file. Red Hat Enterprise Linux 6 ELS and 7 ELS, as well as Community Projects like Fedora and EPEL, include ImageMagick. Exploitation requires an attacker to provide a malicious SVG file to a system utilizing ImageMagick for image processing.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted SVG files with ImageMagick. If ImageMagick is used in an automated or server-side context, consider implementing sandboxing mechanisms or restricting the input sources to trusted origins to limit exposure to specially crafted SVG files.