CVE-2026-25794

Summary

ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

Severity

high

EPSS

0.3% (p26)

Also known as

GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-AnyCPU, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-AnyCPU, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-OpenMP-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-OpenMP-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-HDRI-x86, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-OpenMP-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-OpenMP-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-OpenMP-x86, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q16-x86, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-AnyCPU, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-OpenMP-arm64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-OpenMP-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-x64, GHSA-vhqj-f5cj-9x8h#Magick.NET-Q8-x86

Published

2026-02-24

References

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhqj-f5cj-9x8h
• https://nvd.nist.gov/vuln/detail/CVE-2026-25794
• https://github.com/ImageMagick/ImageMagick/commit/ffe589df5ff8ce1433daa4ccb0d2a9fadfbe30ed

Related advisories

• CVE-2026-46522 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-46520 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-33901 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-33908 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-30929 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-28693 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-28691 — high · NuGet/Magick.NET-Q16-AnyCPU
• CVE-2026-28494 — high · NuGet/Magick.NET-Q16-AnyCPU

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity