CVE-2025-53014

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-53014
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue.

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hm4x-r5hc-794f
Configurations

No configuration.

History

15 Jul 2025, 13:14

Type Values Removed Values Added
Summary
  • (es) ImageMagick es un software gratuito y de código abierto que se utiliza para editar y manipular imágenes digitales. Las versiones anteriores a la 7.1.2-0 y la 6.9.13-26 presentan un desbordamiento del búfer de pila en la función `InterpretImageFilename`. El problema se debe a un error de error de uno en uno que provoca un acceso a memoria fuera de los límites al procesar cadenas de formato que contienen signos de porcentaje consecutivos (`%%`). Las versiones 7.1.2-0 y 6.9.13-26 solucionan el problema.

14 Jul 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-14 18:15

Updated : 2025-07-15 13:14

NVD link : CVE-2025-53014

Mitre link : CVE-2025-53014

CVE.ORG link : CVE-2025-53014

JSON object : View

Products Affected

No product.

CWE
CWE-125

Out-of-bounds Read

CWE-193

Off-by-one Error