Servers and applications
CVE-2025-57807
ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum + length (amortized) instead of offset + length, and copies to data + offset. When…
- Severity
- Critical 9.8
- Published
- 5 Sept 2025
- Last changed
- 19 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.9.13-29, 7.1.2-3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick |
|