Magick's failure to limit the depth of SVG file reads caused a DoS attack.

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• ImageMagick/ImagemagickOSV

  Range: 7.0.1-0, 7.0.1-1, 7.0.1-10, …
• osv-coords29 versions

  pkg:apk/chainguard/imagemagick-6pkg:apk/chainguard/imagemagick-6-devpkg:apk/chainguard/imagemagick-6-docpkg:apk/chainguard/imagemagick-6-staticpkg:nuget/magick.net-q16-anycpupkg:nuget/magick.net-q16-arm64pkg:nuget/magick.net-q16-hdri-anycpupkg:nuget/magick.net-q16-hdri-arm64pkg:nuget/magick.net-q16-hdri-openmp-arm64pkg:nuget/magick.net-q16-hdri-openmp-x64pkg:nuget/magick.net-q16-hdri-x64pkg:nuget/magick.net-q16-hdri-x86pkg:nuget/magick.net-q16-openmp-arm64pkg:nuget/magick.net-q16-openmp-x64pkg:nuget/magick.net-q16-x64pkg:nuget/magick.net-q16-x86pkg:nuget/magick.net-q8-anycpupkg:nuget/magick.net-q8-arm64pkg:nuget/magick.net-q8-openmp-arm64pkg:nuget/magick.net-q8-openmp-x64pkg:nuget/magick.net-q8-x86pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweedpkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

  < 0+ 28 more

  • (no CPE)range: < 0
  • (no CPE)range: < 6.9.13.37-r0
  • (no CPE)range: < 6.9.13.37-r0
  • (no CPE)range: < 6.9.13.37-r0
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 14.10.1
  • (no CPE)range: < 7.1.1.21-150600.3.35.1
  • (no CPE)range: < 7.1.2.0-160000.5.1
  • (no CPE)range: < 7.1.2.12-1.1
  • (no CPE)range: < 7.1.0.9-150400.6.61.1
  • (no CPE)range: < 7.1.1.43-150700.3.30.1
  • (no CPE)range: < 7.1.2.0-160000.5.1
  • (no CPE)range: < 7.1.2.0-160000.5.1
  • (no CPE)range: < 6.8.8.1-71.224.1

• github.com/advisories/GHSA-p27m-hp98-6637ghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2025-68618ghsaADVISORY
• github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60bebghsax_refsource_MISCWEB
• github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637ghsax_refsource_CONFIRMWEB

No linked articles in our index yet.