CVE catalog

CVE-2025-55154

ImageMagick vulnerabilities

[CVE catalog]

Severity
High · CVSS 8.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.95% · Oct 25, 2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianimagemagicksid8:7.1.2.34+dfsg1-1fixed
Debianimagemagickforky8:7.1.2.31+dfsg1-1fixed
Debianimagemagicktrixie8:7.1.1.43+dfsg1-1+deb13u12fixed
Debianimagemagicktrixie-security8:7.1.1.43+dfsg1-1+deb13u11fixed
Debianimagemagickbookworm8:6.9.11.60+dfsg-1.6+deb12u11fixed
Debianimagemagickbookworm-security8:6.9.11.60+dfsg-1.6+deb12u14fixed
Debiangraphicsmagicksid1.4+really1.3.49-1fixed
Debiangraphicsmagickforky1.4+really1.3.49-1fixed
Debiangraphicsmagicktrixie1.4+really1.3.45+hg17696-1vulnerable
Debiangraphicsmagickbookworm1.4+really1.3.40-4+deb12u1vulnerable
Debiangraphicsmagickbookworm-security1.4+really1.3.40-4+deb12u1vulnerable
Ubuntuimagemagicknoble8:6.9.11.60+dfsg-1.6+deb12u4fixed
Ubuntuimagemagicknoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6-commonnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6-docnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6.q16noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6.q16hdrinoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-q16-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-q16hdri-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16-9t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16hdri-9t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6-arch-confignoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-7-extranoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-7-extranoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16hdri-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuperlmagicknoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
OpensuseGraphicsMagickleap 16.01.3.45-160000.13.1fixed
SuseGraphicsMagicklinux enterprise module for package hub 15 sp71.3.42-150600.3.45.1fixed
OpensuseGraphicsMagicktumbleweed1.3.48-2.1fixed
Ubuntuimagemagickpro8:6.9.11.60+dfsg-1.6ubuntu1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build2vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagickpro8:6.9.11.60+dfsg-1.6ubuntu1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build2vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
OpensuseImageMagicktumbleweed7.1.2.1-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianimagemagicksourcesid8:7.1.2.1+dfsg1-1not yet assignedNot reported[1111103]
Debianimagemagicksourceforky8:7.1.2.1+dfsg1-1not yet assignedNot reported[1111103]
Debianimagemagicksourcetrixie8:7.1.1.43+dfsg1-1+deb13u2not yet assignedNot reported[1111103]
Debianimagemagicksourcebookworm8:6.9.11.60+dfsg-1.6+deb12u4not yet assignedNot reported[1111103]
Debiangraphicsmagicksourcesid1.4+really1.3.49-1not yet assignedNot reportedNot reported
Debiangraphicsmagicksourceforky1.4+really1.3.49-1not yet assignedNot reportedNot reported
Debiangraphicsmagicksourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debiangraphicsmagicksourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntuimagemagickdebnoble8:6.9.11.60+dfsg-1.6+deb12u4Not reportedNot reportedNot reported
Ubuntuimagemagickdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6-commondebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6-docdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6.q16debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6.q16hdridebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-q16-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-q16hdri-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16-9t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16hdri-9t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6-arch-configdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-7-extradebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-7-extradebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16hdri-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuperlmagickdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
OpensuseGraphicsMagickrpmleap 16.01.3.45-160000.13.1Not reportedOPENSUSE-SU-2026:21935-1Not reported
SuseGraphicsMagickrpmlinux enterprise module for package hub 15 sp71.3.42-150600.3.45.1Not reportedSUSE-SU-2026:4044-1Not reported
OpensuseGraphicsMagickrpmtumbleweed1.3.48-2.1Not reportedOPENSUSE-SU-2026:11692-1Not reported
Ubuntuimagemagickdebpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedUSN-7756-1Not reported
Ubuntuimagemagickdebpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedUBUNTU-CVE-2025-55154Not reported
OpensuseImageMagickrpmtumbleweed7.1.2.1-1.1Not reportedOPENSUSE-SU-2025:15471-1Not reported

[Debian bug #1111103]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [graphicsmagick]Affected
    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · all · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · all · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · all · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

  • Source package: [graphicsmagick]

    Details (4)
    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · amd64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

    • 1.4+really1.3.40-4+deb12u1 · arm64 · bookworm-security

      Affected

      usn · graphicsmagick · debian · bookworm

[openSUSE Tumbleweed]

  • [GraphicsMagick]Affected

    Source package: [GraphicsMagick]

    Details (1)
    • 1.3.48-1.2 · x86_64 · tumbleweed

      Affected · Fixed: 1.3.48-2.1

      usn · GraphicsMagick · opensuse · tumbleweed

  • Source package: [GraphicsMagick]

    Details (1)
    • 1.3.48-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.3.48-2.1

      Version impact unknown

      usn · GraphicsMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.1-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

Next results

Observed:

References