DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

CVE-2025-55004

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-55004

Severity

7.6

High

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

Summary

ImageMagick: heap-buffer overflow read in MNG magnification with alpha

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-55004

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing