Skip to content
OpenAdvisories
High ALAS2023-2025-1159 1 CVE

Important: ImageMagick security update (Amazon Linux 2023)

Published Aug 21, 2025 · Updated Sep 8, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-55154: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Fixed packages 12

ReleasePackageFixed in
Amazon Linux · 2023 ImageMagick 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-c++ 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-c++-debuginfo 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-c++-devel 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-debuginfo 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-debugsource 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-devel 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-doc 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-libs 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-libs-debuginfo 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-perl 1:6.9.12.82-1.amzn2023.0.10
Amazon Linux · 2023 ImageMagick-perl-debuginfo 1:6.9.12.82-1.amzn2023.0.10

Vulnerabilities 1

  • High 8.8
    CVE-2025-55154

    ImageMagick: integer overflows in MNG magnification

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corrupt…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu NuGet

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-55154.html