Summary
Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that
ImageMagick did not properly sanitize image file names. An attacker could
possibly use this issue to cause a denial of service, obtain sensitive
information, or execute arbitrary code. (CVE-2025-55298)
Lumina Mescuwa discovered that ImageMagick did not properly handle memory
when encoding BMP images. An attacker could possibly use this issue to
cause ImageMagick to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-57803)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm15 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.16+esm14 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.15+esm6 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | imagemagick | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3 |
Vulnerabilities 2
-
High 7.5
ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed…
-
High 7.5
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_p…