CVE-2025-55004: imagemagick Heap-based Buffer Overflow

Vulnerability summary

CVE-2025-55004 is a high (CVSS 7.6) Heap-based Buffer Overflow vulnerability in imagemagick. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 13-08-2025
   PublishedVulnerability first disclosed.
2. 13-08-2025
   Last modifiedVulnerability information updated.

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.

• CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().