Metrics
Affected Vendors & Products
Tue, 26 Aug 2025 18:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* |
Tue, 15 Jul 2025 13:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
epss
|
Tue, 15 Jul 2025 00:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
| |
Metrics |
threat_severity
|
threat_severity
|
Mon, 14 Jul 2025 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Mon, 14 Jul 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue. | |
Title | ImageMagick has Heap Buffer Overflow in InterpretImageFilename | |
Weaknesses | CWE-125 CWE-193 |
|
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-07-14T18:26:16.271Z
Reserved: 2025-06-24T03:50:36.796Z
Link: CVE-2025-53014

Updated: 2025-07-14T18:26:08.532Z

Status : Analyzed
Published: 2025-07-14T18:15:23.620
Modified: 2025-08-26T17:52:28.520
Link: CVE-2025-53014


Updated: 2025-07-15T08:04:25Z