The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0061-1 advisory.

    - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821).
    - CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822).
    - CVE-2025-69204: an integer overflow can lead to a DoS attack (bsc#1255823).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771425977 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-68618)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771011399 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1771010755 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1776257772 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in     InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper     sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from     heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
    (CVE-2025-55298)

  - ImageMagick is an open source software suite for displaying, converting, and editing raster image files.
    In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the     BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value     by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP     file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow     check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A     specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this     overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit     builds of ImageMagick where default resource limits for width, height, and area have been manually     increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems     using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions     7.1.2-7 and 6.9.13-32. (CVE-2025-62171)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-68618)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions     14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language)     parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to     assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in     version 14.10.2. (CVE-2026-23952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776257014 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in     InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper     sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from     heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
    (CVE-2025-55298)

  - ImageMagick is an open source software suite for displaying, converting, and editing raster image files.
    In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the     BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value     by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP     file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow     check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A     specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this     overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit     builds of ImageMagick where default resource limits for width, height, and area have been manually     increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems     using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions     7.1.2-7 and 6.9.13-32. (CVE-2025-62171)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-68618)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions     14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language)     parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to     assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in     version 14.10.2. (CVE-2026-23952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1776257247 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in     InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper     sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from     heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
    (CVE-2025-55298)

  - ImageMagick is an open source software suite for displaying, converting, and editing raster image files.
    In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the     BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value     by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP     file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow     check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A     specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this     overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit     builds of ImageMagick where default resource limits for width, height, and area have been manually     increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems     using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions     7.1.2-7 and 6.9.13-32. (CVE-2025-62171)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-68618)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions     14.10.1 and below have a NULL pointer dereference vulnerability in the MSL (Magick Scripting Language)     parser when processing <comment> tags before images are loaded. This can lead to DoS attack due to     assertion failure (debug builds) or NULL pointer dereference (release builds). This issue is fixed in     version 14.10.2. (CVE-2026-23952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ImageMagick package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused     an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12     fixes the issue. (CVE-2025-69204)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
282500	openSUSE 15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:0061-1)	Nessus	SuSE Local Security Checks	2026/1/9	2026/6/26	high
362373	CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771425977)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high
359653	Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.6:CLSA-2026:1771011399)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
360615	AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.2:CLSA-2026:1771010755)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
353090	CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1776257772)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	medium
361208	CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776257014)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
361665	CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1776257247)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	medium
332692	Photon OS 5.0: Imagemagick PHSA-2026-5.0-91-0728	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	high
280746	Linux Distros Unpatched Vulnerability : CVE-2025-69204	Nessus	Misc.	2025/12/30	2026/7/25	high

检测

插件搜索

high

high

high

high

medium

medium

medium

high

high