Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: imagemagick fixed in 7.1.2.12-r0
AnalysisAI
ImageMagick on Alpine Linux was patched in package version 7.1.2.12-r0 to address CVE-2025-68950. The underlying vulnerability type, affected component, and technical impact are not described in the available data - only the fix version is confirmed by the Alpine Linux vendor advisory. With an EPSS score of 0.03% (9th percentile) and no KEV listing, this vulnerability shows no public exploitation signals at time of analysis.
Technical ContextAI
ImageMagick is a widely-used open-source image processing library and toolset capable of reading, converting, and manipulating hundreds of image formats. The Alpine Linux package ecosystem vendors ImageMagick and applies distribution-specific patches. The Alpine package version 7.1.2.12-r0 corresponds to upstream ImageMagick release 7.1.2-12 with Alpine patch revision r0. No CWE has been assigned to this CVE, meaning the root cause class - whether a memory corruption, input validation failure, use-after-free, or other class - is not confirmed from available data. No CPE strings were provided to narrow the affected component further.
Affected ProductsAI
ImageMagick as packaged by Alpine Linux is confirmed affected, with the fix released in Alpine package version 7.1.2.12-r0. All prior Alpine Linux package versions of ImageMagick before 7.1.2.12-r0 should be considered potentially vulnerable. The specific Alpine Linux branch or release stream affected is not stated in the available data. No CPE strings were provided, and the upstream ImageMagick versions affected beyond the Alpine packaging context are not confirmed from this record alone.
RemediationAI
Update the Alpine Linux ImageMagick package to version 7.1.2.12-r0 or later using the Alpine package manager: 'apk upgrade imagemagick'. This is the vendor-released patch confirmed by the Alpine Linux advisory. No specific workarounds are documented in the available data because the vulnerability's attack vector and exploitable component are unknown. If immediate patching is not feasible and ImageMagick is exposed to untrusted image input (e.g., via a web upload handler), restricting or temporarily disabling untrusted image processing is a prudent compensating control, though its effectiveness cannot be confirmed without knowing the vulnerability class. No upstream ImageMagick advisory URL was provided in the reference data.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today