CVE-2025-55004 — Heap-based Buffer Overflow in Imagemagick

CWE-122 — Heap-based Buffer Overflow6 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 85.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ImagemagickDebian Imagemagick
Timeline
PublishedAug 13
Latest updateAug 25

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶debiandebian/imagemagick< imagemagick 8:7.1.2.1+dfsg1-1 (forky)
▶Debianimagemagick/imagemagick< 8:7.1.1.43+dfsg1-1+deb13u2+1

🔴Vulnerability Details

3
OSV
imagemagick: heap-buffer overflow read in MNG magnification with alpha↗2025-08-25
▶
GHSA
imagemagick: heap-buffer overflow read in MNG magnification with alpha↗2025-08-25
▶
OSV
CVE-2025-55004: ImageMagick is free and open-source software used for editing and manipulating digital images↗2025-08-13
▶

📋Vendor Advisories

2
Red Hat
imagemagick: ImageMagick: heap-buffer overflow↗2025-08-13
▶
Debian
CVE-2025-55004: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d...↗2025
▶