All vulnerabilities

Servers and applications

CVE-2025-62594

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes…

Severity
Medium 5.5
Published
27 Oct 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.1.2-8
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Every version before 7.1.2-8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-62594
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62594