Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55154

Опубликовано: 13 авг. 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 7.8
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-27 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-1 (исключая)

EPSS

Процентиль: 16%
0.00051
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 8.3
redhat
3 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 8.8
debian
3 месяца назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 8.8
github
3 месяца назад

imagemagick: integer overflows in MNG magnification

oracle-oval
около 2 месяцев назад

ELSA-2025-15666: ImageMagick security update (IMPORTANT)

EPSS

Процентиль: 16%
0.00051
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-190