PT-2025-29504

CVE-2025-53014

·

Published

2025-07-14

·

Updated

2026-10-09

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 ImageMagick versions prior to 6.9.13-26
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. A heap buffer overflow exists in the InterpretImageFilename function due to an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs (%%).
Recommendations: Update ImageMagick to version 7.1.2-0 or later. Update ImageMagick to version 6.9.13-26 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-HM4X-R5HC-794F
ALT-PU-2025-10960
ALT-PU-2025-11045
CLSA-2026-1777046565
CLSA-2026-1790182513
DLA-4297-1
ECHO-0115-D43C-48CC
JLSEC-2026-916
OESA-2025-1906
OESA-2025-1907
OESA-2025-1908
OESA-2025-1909
OESA-2025-1910
OESA-2025-1911
OPENSUSE-SU-2025:15349-1
SUSE-SU-2025:02510-1
SUSE-SU-2025_02510-1
SUSE-SU-2025:02511-1
SUSE-SU-2025_02511-1
SUSE-SU-2025:02751-1
SUSE-SU-2025_02751-1
SUSE-SU-2025:02801-1
SUSE-SU-2025_02801-1
USN-7728-1
Found an issue in the description? Have something to add? Feel free to write us 👾