Skip to content
OpenAdvisories
High RHSA-2025:16313 1 CVE

Red Hat Security Advisory: ImageMagick security update

Published Sep 22, 2025 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++ 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-c++-devel 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-debuginfo 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-devel 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-doc 0:6.9.10.68-9.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 ImageMagick-perl 0:6.9.10.68-9.el7_9

Vulnerabilities 1

  • High 7.5
    CVE-2025-57803

    ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_p…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2391093
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16313.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-57803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-57803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-57803
  • article
    https://github.com/ImageMagick/ImageMagick/commit/2c55221f4d38193adcb51056c14cf238fbcc35d7
  • article
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mxvv-97wh-cfmm
  • article
    https://github.com/dlemstra/Magick.NET/releases/tag/14.8.1