CVE-2026-25897 | ImageMagick up to 6.9.13-39/7.1.2-14 on 32-bit Sun Decoder heap-based overflow (GHSA-6j5f-24fw-pqp4)

February 24, 2026 Yanac

A vulnerability was found in ImageMagick up to 6.9.13-39/7.1.2-14 on 32-bit. It has been rated as critical. Impacted is an unknown function of the component Sun Decoder. This manipulation causes heap-based buffer overflow.

This vulnerability appears as CVE-2026-25897. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More