CVE-2025-53019CWE-125

ImageMagick has Memory Leak in magick stream

Low · published July 14, 2025

CVSS v3.1
3.7
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and 6.9.13-26 fix the issue.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-07-14T19:42Z
EPSS history
Timeline
  • 14 JUL 19:42Z
    ImageMagick has Memory Leak in magick stream
    cvelistv5