CVE-2025-62594
Medium
Description
ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes. This issue has been patched in version 7.1.2-8.
SeverityMedium
CVSS4.7
Exploit probability—
ProductImagemagick
PublishedOct 27, 2025
First seenOct 27, 2025
How to fix
Update
- imagemagick imagemagick7.1.2-8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imagemagick imagemagick | v < 7.1.2-8 | 7.1.2-8 |
| Magick.NET-Q16-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q8-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-HDRI-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q8-OpenMP-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-HDRI-OpenMP-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-OpenMP-x64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q8-arm64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-arm64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-OpenMP-arm64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q8-OpenMP-arm64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-HDRI-OpenMP-arm64NuGet | v ≤ 14.9.0 | — |
| Magick.NET-Q16-HDRI-arm64NuGet | v ≤ 14.9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.