Логотип exploitDog
bind: "CVE-2025-55298"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-55298"

Количество 13

Количество 13

ubuntu логотип

CVE-2025-55298

около 2 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2025-55298

около 2 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2025-55298

около 2 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-55298

около 2 месяцев назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9ccg-6pjw-x645

около 2 месяцев назад

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2025-12590

около 2 месяцев назад

Уязвимость функции InterpretImageFilename() консольного графического редактора ImageMagick, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20250930-08

16 дней назад

Множественные уязвимости ImageMagick7

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20250930-07

16 дней назад

Множественные уязвимости ImageMagick

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03150-1

около 1 месяца назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03164-1

около 1 месяца назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03152-1

около 1 месяца назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03151-1

около 1 месяца назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03113-1

около 1 месяца назад

Security update for ImageMagick

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.5
0%
Низкий
около 2 месяцев назад
redhat логотип
CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

CVSS3: 7.5
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2025-55298

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 7.5
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-9ccg-6pjw-x645

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

CVSS3: 7.5
0%
Низкий
около 2 месяцев назад
fstec логотип
BDU:2025-12590

Уязвимость функции InterpretImageFilename() консольного графического редактора ImageMagick, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20250930-08

Множественные уязвимости ImageMagick7

CVSS3: 8.8
16 дней назад
redos логотип
ROS-20250930-07

Множественные уязвимости ImageMagick

CVSS3: 8.8
16 дней назад
suse-cvrf логотип
SUSE-SU-2025:03150-1

Security update for ImageMagick

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03164-1

Security update for ImageMagick

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03152-1

Security update for ImageMagick

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03151-1

Security update for ImageMagick

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03113-1

Security update for ImageMagick

около 1 месяца назад

Уязвимостей на страницу