Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55154

Опубликовано: 13 авг. 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 7.8
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-27 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-1 (исключая)

EPSS

Процентиль: 62%
0.00951
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 1 года назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 8.3
redhat
около 1 года назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 7.8
debian
около 1 года назад

ImageMagick is free and open-source software used for editing and mani ...

suse-cvrf
около 2 месяцев назад

Security update for GraphicsMagick

suse-cvrf
2 месяца назад

Security update for GraphicsMagick

EPSS

Процентиль: 62%
0.00951
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-190