CVE-2025-53101CWE-124

ImageMagick has Stack Buffer Overflow in image.c

High · published July 14, 2025

CVSS v3.1
7.4
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions 7.1.2-0 and 6.9.13-26 fix the issue.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00950 · 60.9th percentile
Weakness
CWE-124 · Buffer Underwrite ('Buffer Underflow')
Published
2025-07-14T19:51Z
EPSS history
Timeline
  • 14 JUL 19:51Z
    ImageMagick has Stack Buffer Overflow in image.c
    cvelistv5