/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-62594

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-62594

Severity

4.7

Medium

CVSS V3

Summary

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

Description

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes. This issue has been patched in version 7.1.2-8.

References

  • https://images.chainguard.dev/security/CGA-xmgg-7j2c-7j26

Affected packages


Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing