CVE-2025-55298

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-28 ImageMagick versions prior to 7.1.2-2

Description: ImageMagick is software used for editing and manipulating digital images. A format string bug exists in the InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. This can allow an attacker to overwrite arbitrary memory regions, potentially leading to heap overflow and remote code execution.

Recommendations: Update ImageMagick to version 6.9.13-28 or later. Update ImageMagick to version 7.1.2-2 or later.