ImageMagick-7.1.2-13

[Douglas R. Reno]

New patch version for BLFS 13.0.

[Douglas R. Reno]

There are numerous changes here because we are 12 versions behind, please see ​https://github.com/ImageMagick/Website/blob/main/ChangeLog.md

That being said though, there are numerous security issues here as well, many of which have proof of concepts for shell access in the case of RCEs. Note that for 99% of our users though, the RCE vulnerabilities are really just arbitrary code execution vulnerabilities that can happen if they load a malicious file.

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mxvv-97wh-cfmm ... 7.5 High. heap buffer overflow that allows for RCE while converting images to BMP. CVE-2025-57803

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9ccg-6pjw-x645 ... 7.5 High. Format String Bug in InterpretImageFilename might lead to arbitrary code execution. Remote code execution. CVE-2025-55298

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fh55-q5pj-pxgw ... 3.7 Low. Divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash. CVE-2025-55212

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-23hg-53q6-hqfg ... 4.2 Moderate. ImageMagick BlobStream Forward-Seek Under-Allocation → Heap OOB Write (WriteBlob) - RCE, but attack complexity is high. CVE-2025-57807.

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm ...

Integer Overflow in BMP Decoder (ReadBMP). Possible RCE though. 4.4 Medium, and only exploitable on 32-bit architectures. CVE-2025-62171

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wpp4-vqfq-v4hp ...

CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS). 4.7 Medium. CVE-2025-62594

• ​https://github.com/advisories/GHSA-6hjr-v6g4-3fm8 ... ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only) . Rated as 7.5 High, Memory Disclosure. CVE-2025-66628.

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hrh7-j8q2-4qcw ...

Converting a malicious MVG file to SVG caused an integer overflow. Rated as 5.3 Moderate. Just an application crash though. CVE-2025-69204.

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7rvh-xqp3-pr8j ...

Magick's failure to limit MVG mutual references forming a loop. Denial of service due to a stack overflow. Rated as 4.0 Moderate. CVE-2025-68950

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637 ...

Magick's failure to limit the depth of SVG file reads caused a DoS attack. Stack overflow, denial of service. Rated as 5.3 Moderate. CVE-2025-68618.

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8 ...

Heap buffer overflow with attacker-controlled data in XBM parser. Rated as 8.1 High. RCE. CVE-2026-23876

• ​https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5vx3-wx4q-6cj8 ...

NULL pointer dereference in MSL parser via <comment> tag before image load. Rated as 6.5 Moderate. DoS. CVE-2026-23952.

• ​https://github.com/advisories/GHSA-39h3-g67r-7g3c ... ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails. Rated as 6.5 Moderate. DoS. CVE-2026-22770.

[Douglas R. Reno]

While collecting data for the security advisory, I've discovered that some vulnerabilities have been updated to Critical.

[Douglas R. Reno]

Fixed at 207e0e02e73cc913c35418cf2507fdcc3497b2fd

SA-12.4-094 issued.