critique
CVE-2025-53101
ImageMagick: ImageMagick Stack Buffer Overflow
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Julia9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Julia, Photon OS. Plus basse selon GHSA (élevée), Red Hat (moyenne), Amazon (moyenne), Ubuntu (moyenne).
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions 7.1.2-0 and 6.9.13-26 fix the issue.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | ImageMagick_jll | 7.1.2001+0 |
| Photon OS 4.0 | ImageMagick, ImageMagick-c++, ImageMagick-c++-devel et 3 autres | 7.1.2.8-1.ph4 |
| Photon OS 5.0 | ImageMagick, ImageMagick-c++, ImageMagick-c++-devel et 3 autres | 7.1.2.8-1.ph5 |
| alpine 3.23 | imagemagick | 7.1.2.8-r0 |
| alpine 3.24 | imagemagick | 7.1.2.8-r0 |
| alpine edge | imagemagick | 7.1.2.8-r0 |
| amazon linux 2 | ImageMagick, ImageMagick-c++, ImageMagick-c++-devel et 4 autres | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2023 | ImageMagick, ImageMagick-c++, ImageMagick-c++-debuginfo et 9 autres | 1:6.9.12.82-1.amzn2023.0.9 |
| chainguard | imagemagick-6 | 0 |
| debian 11 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| debian 12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u4 |
| debian 13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u1 |
Afficher les 144 entrées de 38 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | ImageMagick_jll | 7.1.2001+0 |
| Photon OS 4.0 | ImageMagick | 7.1.2.8-1.ph4 |
| Photon OS 4.0 | ImageMagick-c++ | 7.1.2.8-1.ph4 |
| Photon OS 4.0 | ImageMagick-c++-devel | 7.1.2.8-1.ph4 |
| Photon OS 4.0 | ImageMagick-devel | 7.1.2.8-1.ph4 |
| Photon OS 4.0 | ImageMagick-doc | 7.1.2.8-1.ph4 |
| Photon OS 4.0 | ImageMagick-libs | 7.1.2.8-1.ph4 |
| Photon OS 5.0 | ImageMagick | 7.1.2.8-1.ph5 |
| Photon OS 5.0 | ImageMagick-c++ | 7.1.2.8-1.ph5 |
| Photon OS 5.0 | ImageMagick-c++-devel | 7.1.2.8-1.ph5 |
| Photon OS 5.0 | ImageMagick-devel | 7.1.2.8-1.ph5 |
| Photon OS 5.0 | ImageMagick-doc | 7.1.2.8-1.ph5 |
| Photon OS 5.0 | ImageMagick-libs | 7.1.2.8-1.ph5 |
| alpine 3.23 | imagemagick | 7.1.2.8-r0 |
| alpine 3.24 | imagemagick | 7.1.2.8-r0 |
| alpine edge | imagemagick | 7.1.2.8-r0 |
| amazon linux 2 | ImageMagick | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-c++ | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-c++-devel | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-debuginfo | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-devel | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-doc | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2 | ImageMagick-perl | 6.9.10.97-1.amzn2.0.14 |
| amazon linux 2023 | ImageMagick | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-c++ | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-c++-debuginfo | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-c++-devel | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-debuginfo | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-debugsource | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-devel | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-doc | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-libs | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-libs-debuginfo | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-perl | 1:6.9.12.82-1.amzn2023.0.9 |
| amazon linux 2023 | ImageMagick-perl-debuginfo | 1:6.9.12.82-1.amzn2023.0.9 |
| chainguard | imagemagick-6 | 0 |
| debian 11 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| debian 12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u4 |
| debian 13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u1 |
| debian 14 | imagemagick | 8:7.1.1.47+dfsg1-2 |
| echo | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u4 |
| minimos | imagemagick | 7.1.2.0-r0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-AnyCPU | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-AnyCPU | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-OpenMP-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-OpenMP-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-HDRI-x86 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-OpenMP-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-OpenMP-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q16-x86 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-AnyCPU | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-OpenMP-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-OpenMP-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | Magick.NET-Q8-x86 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-anycpu | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-anycpu | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-openmp-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-openmp-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-hdri-x86 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-openmp-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-openmp-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q16-x86 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-anycpu | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-openmp-arm64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-openmp-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-x64 | 14.7.0 |
| nuget::GitHub Security Advisory NuGet | magick.net-q8-x86 | 14.7.0 |
| rapidfort alpine 3.20 | imagemagick | 7.1.1.43-r0 |
| rapidfort alpine 3.21 | imagemagick | 7.1.1.43-r0 |
| rapidfort alpine 3.24 | imagemagick | 7.1.1.43-r0 |
| rapidfort amazon linux 2023 | ImageMagick | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-c++ | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-c++-devel | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-devel | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-doc | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-libs | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort amazon linux 2023 | ImageMagick-perl | 1:6.9.12.82-1.amzn2023.0.9 |
| rapidfort debian 12 | imagemagick | 0:7.1.1.43+dfsg1-1+deb13u1, 8:7.1.1.47+dfsg1-2 |
| rapidfort debian 12 | rf-imagemagick | 8:7.1.1.43+dfsg1-1+deb13u3 |
| rapidfort debian 13 | imagemagick | 0:7.1.1.43+dfsg1-1+deb13u1, 8:7.1.1.47+dfsg1-2 |
| rapidfort debian 13 | rf-imagemagick | 8:7.1.1.43+dfsg1-1+deb13u3 |
| rapidfort fedora 43 | ImageMagick | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-c++ | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-c++-devel | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-devel | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-djvu | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-doc | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-heic | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-libs | 1:7.1.2.27-1.fc43 |
| rapidfort fedora 43 | ImageMagick-perl | 1:7.1.2.27-1.fc43 |
| rapidfort Oracle Linux 10 | ImageMagick | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-c++ | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-c++-devel | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-devel | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-djvu | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-doc | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-heic | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-libs | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 10 | ImageMagick-perl | 1:7.1.2.27-1.el10_3 |
| rapidfort Oracle Linux 9 | ImageMagick | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-c++ | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-c++-devel | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-devel | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-djvu | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-doc | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-heic | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-libs | 1:6.9.13.50-1.el9 |
| rapidfort Oracle Linux 9 | ImageMagick-perl | 1:6.9.13.50-1.el9 |
| rapidfort ubuntu 20.04 | imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| rapidfort ubuntu 20.04 | rf-imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| rapidfort ubuntu 22.04 | imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| rapidfort ubuntu 22.04 | rf-imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| rapidfort ubuntu 24.04 | imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| rapidfort ubuntu 24.04 | rf-imagemagick | 8:7.1.1.43+dfsg1-1ubuntu1 |
| Red Hat | ImageMagick | pas de correctif indiqué |
| Red Hat | ImageMagick-c++ | pas de correctif indiqué |
| Red Hat | ImageMagick-c++-devel | pas de correctif indiqué |
| Red Hat | ImageMagick-devel | pas de correctif indiqué |
| Red Hat | ImageMagick-doc | pas de correctif indiqué |
| Red Hat | ImageMagick-perl | pas de correctif indiqué |
| root.io debian 11 | imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| root.io debian 11 | rootio-imagemagick | 8:6.9.11.60+dfsg-1.3+deb11u6 |
| root.io debian 12 | imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u4 |
| root.io debian 12 | rootio-imagemagick | 8:6.9.11.60+dfsg-1.6+deb12u4 |
| root.io debian 13 | imagemagick | 8:7.1.1.43+dfsg1-1+deb13u1 |
| root.io debian 13 | rootio-imagemagick | 8:7.1.1.43+dfsg1-1+deb13u1 |
| seal Red Hat 7 | imagemagick | 6.9.10.68-6.el7_9+sp999 |
| seal Red Hat 7 | seal-imagemagick | 6.9.10.68-6.el7_9+sp999 |
| ubuntu 16.04-ESM | imagemagick | 8:6.8.9.9-7ubuntu5.16+esm12 |
| ubuntu 18.04-ESM | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.15+esm4 |
| ubuntu 20.04-ESM | imagemagick | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2 |
| ubuntu 22.04 | imagemagick | pas de correctif indiqué |
| ubuntu 24.04 | imagemagick | pas de correctif indiqué |
Références
- https://access.redhat.com/security/cve/CVE-2025-53101
- https://github.com/ImageMagick/ImageMagick
- https://github.com/ImageMagick/ImageMagick/commit/66dc8f51c11b0ae1f1cdeacd381c3e9a4de69774
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh3h-j545-h8c9
- https://github.com/ImageMagick/ImageMagick6/commit/643deeb60803488373cd4799b24d5786af90972e
- https://github.com/advisories/GHSA-qh3h-j545-h8c9
- https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
- https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html