CVE catalog

CVE-2025-57807

ImageMagick vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 4.2CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.29% · Oct 25, 2026

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum + length (amortized) instead of offset + length, and copies to data + offset. When offset ≫ extent, the copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2⁶⁴ arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianimagemagicksid8:7.1.2.34+dfsg1-1fixed
Debianimagemagickforky8:7.1.2.31+dfsg1-1fixed
Debianimagemagicktrixie8:7.1.1.43+dfsg1-1+deb13u12fixed
Debianimagemagicktrixie-security8:7.1.1.43+dfsg1-1+deb13u11fixed
Debianimagemagickbookworm8:6.9.11.60+dfsg-1.6+deb12u11fixed
Debianimagemagickbookworm-security8:6.9.11.60+dfsg-1.6+deb12u14fixed
Ubuntuimagemagicknoble8:6.9.11.60+dfsg-1.6+deb12u4fixed
Ubuntuimagemagicknoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6-commonnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6-docnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6.q16noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuimagemagick-6.q16hdrinoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-q16-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibimage-magick-q16hdri-perlnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16-9t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16hdri-9t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagick++-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6-arch-confignoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-7-extranoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-7-extranoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickcore-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6-headersnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16hdri-7t64noble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-6.q16hdri-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntulibmagickwand-devnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
Ubuntuperlmagicknoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
CpeimagemagickNot reported7.1.2-3fixed
Ubuntuimagemagickpro8:6.9.11.60+dfsg-1.6ubuntu1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2build2vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1vulnerable
Ubuntuimagemagickpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2fixed
OpensuseImageMagicktumbleweed7.1.2.3-1.1fixed
SuseImageMagicklinux enterprise module for desktop applications 15 sp67.1.1.21-150600.3.23.1fixed
SuseImageMagicklinux enterprise module for development tools 15 sp67.1.1.21-150600.3.23.1fixed
OpensuseImageMagickleap 15.67.1.1.21-150600.3.23.1fixed
SuseImageMagicklinux enterprise module for desktop applications 15 sp77.1.1.43-150700.3.16.1fixed
SuseImageMagicklinux enterprise module for development tools 15 sp77.1.1.43-150700.3.16.1fixed
SuseImageMagicklinux enterprise module for desktop applications 15 sp67.1.0.9-150400.6.43.1fixed
SuseImageMagicklinux enterprise module for desktop applications 15 sp77.1.0.9-150400.6.43.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianimagemagicksourcesid8:7.1.2.3+dfsg1-1not yet assignedNot reported[1114520]
Debianimagemagicksourceforky8:7.1.2.3+dfsg1-1not yet assignedNot reported[1114520]
Debianimagemagicksourcetrixie8:7.1.1.43+dfsg1-1+deb13u2not yet assignedNot reported[1114520]
Debianimagemagicksourcebookworm8:6.9.11.60+dfsg-1.6+deb12u4not yet assignedNot reported[1114520]
Ubuntuimagemagickdebnoble8:6.9.11.60+dfsg-1.6+deb12u4Not reportedNot reportedNot reported
Ubuntuimagemagickdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6-commondebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6-docdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6.q16debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuimagemagick-6.q16hdridebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-q16-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibimage-magick-q16hdri-perldebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16-9t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16hdri-9t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagick++-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6-arch-configdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-7-extradebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-7-extradebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickcore-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6-headersdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16hdri-7t64debnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-6.q16hdri-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntulibmagickwand-devdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
Ubuntuperlmagickdebnoble8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedNot reportedNot reported
CpeimagemagickcpeNot reported7.1.2-3Not reportedNVD-CVE-2025-57807Not reported
Ubuntuimagemagickdebpro8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2Not reportedUBUNTU-CVE-2025-57807Not reported
OpensuseImageMagickrpmtumbleweed7.1.2.3-1.1Not reportedOPENSUSE-SU-2025:15543-1Not reported
SuseImageMagickrpmlinux enterprise module for desktop applications 15 sp67.1.1.21-150600.3.23.1Not reportedSUSE-SU-2025:03509-1Not reported
SuseImageMagickrpmlinux enterprise module for development tools 15 sp67.1.1.21-150600.3.23.1Not reportedSUSE-SU-2025:03509-1Not reported
OpensuseImageMagickrpmleap 15.67.1.1.21-150600.3.23.1Not reportedSUSE-SU-2025:03509-1Not reported
SuseImageMagickrpmlinux enterprise module for desktop applications 15 sp77.1.1.43-150700.3.16.1Not reportedSUSE-SU-2025:03510-1Not reported
SuseImageMagickrpmlinux enterprise module for development tools 15 sp77.1.1.43-150700.3.16.1Not reportedSUSE-SU-2025:03510-1Not reported
SuseImageMagickrpmlinux enterprise module for desktop applications 15 sp67.1.0.9-150400.6.43.1Not reportedSUSE-SU-2025:03616-1Not reported
SuseImageMagickrpmlinux enterprise module for desktop applications 15 sp77.1.0.9-150400.6.43.1Not reportedSUSE-SU-2025:03616-1Not reported

[Debian bug #1114520]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · noarch · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

  • Source package: [ImageMagick]

    Details (1)
    • 7.1.2.29-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.2.3-1.1

      Version impact unknown

      usn · ImageMagick · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Details (4)
    • 8:6.9.11.60+dfsg-1.6+deb12u11 · amd64 · bookworm

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u11 · arm64 · bookworm

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u13 · amd64 · bookworm-security

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u13 · arm64 · bookworm-security

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

  • Source package: [imagemagick]

    Details (4)
    • 8:6.9.11.60+dfsg-1.6+deb12u11 · all · bookworm

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u11 · all · bookworm

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u13 · all · bookworm-security

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

    • 8:6.9.11.60+dfsg-1.6+deb12u13 · all · bookworm-security

      Fixed · Fixed: 8:6.9.11.60+dfsg-1.6+deb12u4

      usn · imagemagick · debian · bookworm; usn · imagemagick · debian · 12

Next results

Observed:

References