{"schemaVersion":3,"id":"USN-7756-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"imagemagick vulnerabilities\n\nIt was discovered that ImageMagick did not properly handle memory when\nperforming magnified size calculations. An attacker could possibly use this\nissue to cause ImageMagick to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2025-55154)\n\nWoojin Park, Hojun Lee, Youngin Won, and Siyeon Han discovered that\nImageMagick incorrectly handled creating thumbnail images for certain\ndimensions. An attacker could possibly use this issue to cause ImageMagick\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n24.04 LTS. (CVE-2025-55212)\n\nLumina Mescuwa discovered that ImageMagick did not properly handle cloning\nsplay trees in the MagickCore library. An attacker could possibly use this\nissue to cause sanitized builds of ImageMagick to crash, resulting in a\ndenial of service. (CVE-2025-55160)\n\nLumina Mescuwa discovered that ImageMagick did not properly handle memory.\nAn attacker could possibly use this issue to cause ImageMagick to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2025-57807)","dates":{"published":"2025-09-18T10:44:22.000Z","modified":"2026-06-25T13:32:31.223Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"imagemagick","name":"imagemagick","label":"imagemagick","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/imagemagick","purlType":"deb","versions":[{"text":"< 8:6.7.7.10-6ubuntu3.13+esm14","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.8.9.9-7ubuntu5.16+esm13","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.7.4+dfsg-16ubuntu6.15+esm5","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8:6.7.7.10-6ubuntu3.13+esm14 | < 8:6.8.9.9-7ubuntu5.16+esm13 | < 8:6.9.7.4+dfsg-16ubuntu6.15+esm5 | < 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3 | < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3 | < 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7756-1","label":"ubuntu.com/security/notices/USN-7756-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-55154","label":"ubuntu.com/security/CVE-2025-55154","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-55160","label":"ubuntu.com/security/CVE-2025-55160","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-55212","label":"ubuntu.com/security/CVE-2025-55212","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-57807","label":"ubuntu.com/security/CVE-2025-57807","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-55154","CVE-2025-55160","CVE-2025-55212","CVE-2025-57807"],"downstream":[],"duplicates":[],"related":["CVE-2025-55154","CVE-2025-55160","CVE-2025-55212","CVE-2025-57807"]},"timeline":[{"kind":"published","date":"2025-09-18T10:44:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:31.223Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:01:47.278Z","stale":false,"partial":false}}