UBUNTU-CVE-2025-55004

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2025-55004
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-55004.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-55004
Upstream
Published
2025-08-13T14:15:00Z
Modified
2025-11-20T17:29:02Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L CVSS Calculator
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.

References

Affected packages

Ubuntu:25.10 / imagemagick

Package

Name
imagemagick
Purl
pkg:deb/ubuntu/imagemagick@8:7.1.2.3+dfsg1-1?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

8:7.*

8:7.1.1.43+dfsg1-1
8:7.1.1.43+dfsg1-1ubuntu1
8:7.1.1.43+dfsg1-1ubuntu2
8:7.1.2.3+dfsg1-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7-common",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7.q16",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7.q16hdri",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7-headers",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16-5",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16hdri-5",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16hdri-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7-arch-config",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7-headers",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-10",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-10-extra",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10-extra",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7-headers",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16-10",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16hdri-10",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16hdri-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-dev",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:7.1.2.3+dfsg1-1"
        }
    ]
}

Ubuntu:25.04 / imagemagick

Package

Name
imagemagick
Purl
pkg:deb/ubuntu/imagemagick@8:7.1.1.43+dfsg1-1?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

8:6.*

8:6.9.13.12+dfsg1-1
8:6.9.13.12+dfsg1-1build1

8:7.*

8:7.1.1.39+dfsg1-3
8:7.1.1.43+dfsg1-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7-common",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7.q16",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "imagemagick-7.q16hdri",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7-headers",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16-5",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16hdri-5",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-7.q16hdri-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagick++-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7-arch-config",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7-headers",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-10",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-10-extra",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10-extra",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickcore-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7-headers",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16-10",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16hdri-10",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-7.q16hdri-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "libmagickwand-dev",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:7.1.1.43+dfsg1-1"
        }
    ]
}