CVE catalog
CVE-2025-55212
ImageMagick vulnerabilities
- Severity
- Medium · CVSS 4.7
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.96% · Oct 25, 2026
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (":") to montage -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | imagemagick | sid | 8:7.1.2.34+dfsg1-1 | fixed |
| Debian | imagemagick | forky | 8:7.1.2.31+dfsg1-1 | fixed |
| Debian | imagemagick | trixie | 8:7.1.1.43+dfsg1-1+deb13u12 | fixed |
| Debian | imagemagick | trixie-security | 8:7.1.1.43+dfsg1-1+deb13u11 | fixed |
| Debian | imagemagick | bookworm | 8:6.9.11.60+dfsg-1.6+deb12u11 | fixed |
| Debian | imagemagick | bookworm-security | 8:6.9.11.60+dfsg-1.6+deb12u14 | fixed |
| Ubuntu | imagemagick | noble | 8:6.9.11.60+dfsg-1.6+deb12u4 | fixed |
| Ubuntu | imagemagick | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | imagemagick-6-common | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | imagemagick-6-doc | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | imagemagick-6.q16 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | imagemagick-6.q16hdri | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libimage-magick-perl | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libimage-magick-q16-perl | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libimage-magick-q16hdri-perl | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-6-headers | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-6.q16-9t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-6.q16-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-6.q16hdri-9t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-6.q16hdri-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagick++-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6-arch-config | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6-headers | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16-7-extra | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16-7t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16hdri-7-extra | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16hdri-7t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-6.q16hdri-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickcore-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-6-headers | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-6.q16-7t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-6.q16-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-6.q16hdri-7t64 | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-6.q16hdri-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | libmagickwand-dev | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | perlmagick | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Ubuntu | imagemagick | pro | 8:6.9.11.60+dfsg-1.6ubuntu1 | vulnerable |
| Ubuntu | imagemagick | pro | 8:6.9.12.98+dfsg1-5 | vulnerable |
| Ubuntu | imagemagick | pro | 8:6.9.12.98+dfsg1-5.2build1 | vulnerable |
| Ubuntu | imagemagick | pro | 8:6.9.12.98+dfsg1-5.2build2 | vulnerable |
| Ubuntu | imagemagick | pro | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1 | vulnerable |
| Ubuntu | imagemagick | pro | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | fixed |
| Opensuse | ImageMagick | leap 16.0 | 7.1.2.0-160000.4.1 | fixed |
| Opensuse | ImageMagick | tumbleweed | 7.1.2.2-2.1 | fixed |
| Suse | ImageMagick | linux enterprise server 16.0 | 7.1.2.0-160000.4.1 | fixed |
| Suse | ImageMagick | linux enterprise server for sap applications 16.0 | 7.1.2.0-160000.4.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | imagemagick | source | sid | 8:7.1.2.3+dfsg1-1 | not yet assigned | Not reported | [1111587] |
| Debian | imagemagick | source | forky | 8:7.1.2.3+dfsg1-1 | not yet assigned | Not reported | [1111587] |
| Debian | imagemagick | source | trixie | 8:7.1.1.43+dfsg1-1+deb13u2 | not yet assigned | Not reported | [1111587] |
| Debian | imagemagick | source | bookworm | 8:6.9.11.60+dfsg-1.6+deb12u4 | not yet assigned | Not reported | [1111587] |
| Ubuntu | imagemagick | deb | noble | 8:6.9.11.60+dfsg-1.6+deb12u4 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick-6-common | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick-6-doc | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick-6.q16 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick-6.q16hdri | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libimage-magick-perl | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libimage-magick-q16-perl | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libimage-magick-q16hdri-perl | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-6-headers | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-6.q16-9t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-6.q16-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-6.q16hdri-9t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-6.q16hdri-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagick++-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6-arch-config | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6-headers | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16-7-extra | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16-7t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16hdri-7-extra | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16hdri-7t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-6.q16hdri-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickcore-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-6-headers | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-6.q16-7t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-6.q16-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-6.q16hdri-7t64 | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-6.q16hdri-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | libmagickwand-dev | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | perlmagick | deb | noble | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | Not reported | Not reported |
| Ubuntu | imagemagick | deb | pro | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2 | Not reported | UBUNTU-CVE-2025-55212 | Not reported |
| Opensuse | ImageMagick | rpm | leap 16.0 | 7.1.2.0-160000.4.1 | Not reported | OPENSUSE-SU-2025:20162-1 | Not reported |
| Opensuse | ImageMagick | rpm | tumbleweed | 7.1.2.2-2.1 | Not reported | OPENSUSE-SU-2025:15498-1 | Not reported |
| Suse | ImageMagick | rpm | linux enterprise server 16.0 | 7.1.2.0-160000.4.1 | Not reported | SUSE-SU-2025:21211-1 | Not reported |
| Suse | ImageMagick | rpm | linux enterprise server for sap applications 16.0 | 7.1.2.0-160000.4.1 | Not reported | SUSE-SU-2025:21211-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [ImageMagick-config-7-SUSE]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.1· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-config-7-upstream-open]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.1· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-config-7-upstream-secure]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.1· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.1· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-devel]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-devel-32bit]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-doc]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· noarch · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [ImageMagick-extra]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagick++-7_Q16HDRI5]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagick++-7_Q16HDRI5-32bit]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagickCore-7_Q16HDRI10]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagickCore-7_Q16HDRI10-32bit]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagick++-devel]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagick++-devel-32bit]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagickWand-7_Q16HDRI10]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [libMagickWand-7_Q16HDRI10-32bit]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
- [perl-PerlMagick]Unknown
Source package: [ImageMagick]
Details (1)
7.1.2.29-1.2· x86_64 · tumbleweedUnknown · Fixed:
7.1.2.2-2.1Version impact unknown
usn · ImageMagick · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [imagemagick]Fixed
Details (4)
8:6.9.11.60+dfsg-1.6+deb12u11· amd64 · bookwormFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u11· arm64 · bookwormFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u13· amd64 · bookworm-securityFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u13· arm64 · bookworm-securityFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
- [imagemagick-6-common]Fixed
Source package: [imagemagick]
Details (4)
8:6.9.11.60+dfsg-1.6+deb12u11· all · bookwormFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u11· all · bookwormFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u13· all · bookworm-securityFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
8:6.9.11.60+dfsg-1.6+deb12u13· all · bookworm-securityFixed · Fixed:
8:6.9.11.60+dfsg-1.6+deb12u4usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03113-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-55212]
- [https://osv.dev/vulnerability/SUSE-SU-2025:21211-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-55212]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15498-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:20162-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-55212]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55212.json]
- [https://ubuntu.com/security/notices/USN-7756-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1906.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]