CVE-2025-68618: ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

December 30, 2025

Using Magick to read a malicious SVG file resulted in a DoS attack.

References

github.com/ImageMagick/ImageMagick
github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
github.com/advisories/GHSA-p27m-hp98-6637
nvd.nist.gov/vuln/detail/CVE-2025-68618

Code Behaviors & Features

Detect and mitigate CVE-2025-68618 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →