Magick's failure to limit the depth of SVG file reads caused a DoS attack.

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-68618 · CVE overview and exploitation status

EUVD-2025-205813

GHSA-p27m-hp98-6637

cve-program · CVE-2025-68618

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
• https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb

euvd · EUVD-2025-205813

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
• https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb

nvd · CVE-2025-68618

• https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637

osv · GHSA-p27m-hp98-6637

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637
• https://nvd.nist.gov/vuln/detail/CVE-2025-68618
• https://github.com/ImageMagick/ImageMagick/commit/6f431d445f3ddd609c004a1dde617b0a73e60beb
• https://github.com/ImageMagick/ImageMagick

No related changes are available here.