CVE-2026-25969 describes a memory leak vulnerability in ImageMagick versions prior to 7.1.2-15, specifically within the coders/ashlar.c component. This flaw, rated 7.5 HIGH on the CVSS scale, allows an unauthenticated attacker to cause a denial of service by triggering an exception during image processing, leading to unreleased memory. While the vulnerability has a high severity and is easily exploitable over the network, there is currently no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, indicating low current attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.1.2-15CPE matchmatch criteria | cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.