Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-55004

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.

Published

2025-08-13T14:15:32.733

Last Modified

2025-08-15T19:31:52.070

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.6 (HIGH)

Weaknesses

Type: Secondary
CWE-122

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	imagemagick	imagemagick	< 7.1.2-1	Yes

References

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw Third Party Advisory, Exploit ([email protected])
https://goo.gle/bigsleep Issue Tracking ([email protected])
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw Third Party Advisory, Exploit (134c704f-9b21-4f2e-91b3-4a467353bcc0)