CVE-2025-55154CWE-190

ImageMagick: integer overflows in MNG magnification

High · published August 13, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00945 · 60.7th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-08-13T14:00Z
EPSS history
Timeline
  • 13 AUG 14:00Z
    ImageMagick: integer overflows in MNG magnification
    cvelistv5