Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55160

Опубликовано: 13 авг. 2025
Источник: nvd
CVSS3: 6.1
CVSS3: 5.3
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-27 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-1 (исключая)

EPSS

Процентиль: 5%
0.00026
Низкий

6.1 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-758

Связанные уязвимости

CVSS3: 6.1
ubuntu
13 дней назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 6.1
redhat
15 дней назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

CVSS3: 6.1
debian
15 дней назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 6.1
github
3 дня назад

ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

EPSS

Процентиль: 5%
0.00026
Низкий

6.1 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-758