ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.
References
| Link | Resource |
|---|---|
| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw | Third Party Advisory Exploit |
| https://goo.gle/bigsleep | Issue Tracking |
| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw | Third Party Advisory Exploit |
Configurations
History
15 Aug 2025, 19:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Imagemagick
Imagemagick imagemagick |
|
| CPE | cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | () https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw - Third Party Advisory, Exploit | |
| References | () https://goo.gle/bigsleep - Issue Tracking |
13 Aug 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-13 14:15
Updated : 2025-08-15 19:31
NVD link : CVE-2025-55004
Mitre link : CVE-2025-55004
JSON object : View
Products Affected
imagemagick
- imagemagick
CWE
No CWE.