Critical Alert 3 Active Exploits Detected Today

CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability →
CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability →
CVE-2026-9198 IBM Langflow Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 4, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-66628NVD

Vulnerability Summary

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its ReadTIMImage function (coders/tim.c). The code reads width and height (16-bit values) from the file header and calculates image_size = 2 * width * height without checking for overflow. On 32-bit systems (or where size_t is 32-bit), this calculation can overflow if width and height are large (e.g., 65535), wrapping around to a small value. This results in a small heap allocation via AcquireQuantumMemory and later operations relying on the dimensions can trigger an out of bounds read. This issue is fixed in version 7.1.2-10.
Severity Level
HIGH(7.5)
Published Date
Dec 10, 2025
Last Modified
Jan 6, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The software reads data past the end, or before the beginning, of the intended buffer.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityNone
AvailabilityNone