Summary
It was discovered that ImageMagick did not properly process certain
format strings when interpreting image filenames. An attacker could
possibly use this issue to cause ImageMagick to crash, resulting in
a denial of service. (CVE-2025-53014)
It was discovered that ImageMagick did not properly process certain
format strings when interpreting image filenames. An attacker could
possibly use this issue to cause ImageMagick to consume resources,
resulting in a denial of service. This issue only affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
and Ubuntu 24.04 LTS. (CVE-2025-53019)
It was discovered that ImageMagick did not properly process certain
format strings when interpreting image filenames. An attacker could
possibly use this issue to cause ImageMagick to crash, resulting in
a denial of service, or possibly execute arbitrary code.
(CVE-2025-53101)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm13 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.16+esm12 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.15+esm4 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | imagemagick | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 |
Vulnerabilities 3
-
High 7.4
ImageMagick has Stack Buffer Overflow in image.c
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template…
-
Low 3.7
ImageMagick has Heap Buffer Overflow in InterpretImageFilename
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes o…
-
Low 3.7
ImageMagick has Memory Leak in magick stream
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template …