What is the CVSS score of EUVD-2025-200466?

EUVD-2025-200466 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H. EPSS exploitation probability: 0.0%.

Which versions of Imagemagick are affected by EUVD-2025-200466?

Organizations using ImageMagick should be aware of moderate risk from CVE-2025-65955 rated CVSS 4.9. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2025-200466?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Imagemagick EUVD-2025-200466

| CVE-2025-65955 MEDIUM

Double Free (CWE-415)

2025-12-02 security-advisories@github.com

Denial Of Service Imagemagick

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Ubuntu

MEDIUM

qualitative

SUSE

4.9 MEDIUM

AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Red Hat

4.9 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Lifecycle Timeline

CVSS changed

Jun 23, 2026 - 18:22 NVD

4.9 (MEDIUM) 6.1 (MEDIUM)

EUVD ID Assigned

Mar 15, 2026 - 14:04 euvd

EUVD-2025-200466

Analysis Generated

Mar 15, 2026 - 14:04 vuln.today

Patch released

Mar 15, 2026 - 14:04 nvd

Patch available

CVE Published

Dec 02, 2025 - 23:15 nvd

MEDIUM 4.9

DescriptionNVD

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls RelinquishMagickMemory on _drawInfo->font, freeing the font string but leaving _drawInfo->font pointing to freed memory while _drawInfo->family is set to that (now-invalid) pointer. Any later cleanup or reuse of _drawInfo->font re-frees or dereferences dangling memory. DestroyDrawInfo and other setters (Options::font, Image::font) assume _drawInfo->font remains valid, so destruction or subsequent updates trigger crashes or heap corruption. This vulnerability is fixed in 7.1.2-9 and 6.9.13-34.

Analysis

More in Imagemagick

View all

CVE-2017-15277 MEDIUM This Month POC

6.5 Oct 12

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc

CVE-2016-5841 CRITICAL Act Now POC

9.8 Dec 13

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of serv

CVE-2016-3717 MEDIUM This Month POC

5.5 May 05

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi

CVE-2016-5118 CRITICAL Emergency

9.8 Jun 10

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbit

CVE-2016-5689 CRITICAL Act Now POC

9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b

CVE-2016-5690 CRITICAL Act Now POC

9.8 Dec 13

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to

CVE-2016-5691 CRITICAL Act Now POC

9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b

CVE-2017-14138 CRITICAL Act Now POC

9.8 Sep 04

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in cer

CVE-2026-23876 CRITICAL Act Now POC

9.8 Jan 20

Heap buffer overflow in ImageMagick's XBM image decoder (ReadXBMImage) lets remote attackers write attacker-controlled d

CVE-2023-34152 CRITICAL Act Now POC

9.8 May 30

A vulnerability was found in ImageMagick. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable

CVE-2019-19952 CRITICAL Act Now POC

9.8 Dec 24

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to R

CVE-2018-14551 CRITICAL Act Now POC

9.8 Jul 23

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory cor

Same weakness CWE-415 – Double Free

View all

CVE-2014-0502 HIGH POC

8.8

CVE-2023-25136 MEDIUM POC

6.5

CVE-2014-1767 HIGH POC

7.2

CVE-2016-5768 CRITICAL POC

9.8

CVE-2016-5772 CRITICAL POC

9.8

CVE-2016-3132 CRITICAL POC

9.8

CVE-2017-6074 HIGH POC

7.8

CVE-2017-9287 MEDIUM POC

6.5

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Medium

imagemagick

Release	Status	Version
upstream	needs-triage	-
bionic	not-affected	rejected cve
focal	not-affected	rejected cve
jammy	not-affected	rejected cve
noble	not-affected	rejected cve
plucky	not-affected	rejected cve
questing	not-affected	rejected cve
trusty	not-affected	rejected cve
xenial	not-affected	rejected cve

Debian

Bug #1122827

imagemagick

Release	Status	Fixed Version	Urgency
bullseye	fixed	8:6.9.11.60+dfsg-1.3+deb11u8	-
bullseye (security)	fixed	8:6.9.11.60+dfsg-1.3+deb11u10	-
bookworm	fixed	8:6.9.11.60+dfsg-1.6+deb12u5	-
bookworm (security)	fixed	8:6.9.11.60+dfsg-1.6+deb12u7	-
trixie	fixed	8:7.1.1.43+dfsg1-1+deb13u4	-
trixie (security)	fixed	8:7.1.1.43+dfsg1-1+deb13u6	-
forky	fixed	8:7.1.2.15+dfsg1-2	-
sid	fixed	8:7.1.2.16+dfsg1-1	-
(unstable)	fixed	8:7.1.2.12+dfsg1-1	-

DLA-4429-1

SUSE

Severity: Medium

Product	Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-5.3 Container suse/sl-micro/6.0/base-os-container:2.1.3-5.3 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-5.3 Container suse/sl-micro/6.0/rt-os-container:2.1.3-6.2	Affected
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd	Affected
SUSE Enterprise Storage 7.1	Fixed
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed

EUVD-2025-200466 vulnerability details – vuln.today

Back

Imagemagick EUVD-2025-200466

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

Analysis

More in Imagemagick

Same weakness CWE-415 – Double Free

Same technique Denial Of Service

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code