{"id":"EUVD-2025-34893","revision":"620bb90d831b46d3b2b4aba68a2dd5f6","records":[{"revision":"620bb90d831b46d3b2b4aba68a2dd5f6","observedAt":"2026-10-27T23:49:56.282+00:00","statement":{"source":"euvd","id":"EUVD-2025-34893","aliases":["CVE-2025-62171","GHSA-9pp9-cfwx-54rm"],"title":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. …","description":"ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating the extent value by multiplying image columns by bits per pixel. On 32-bit systems with size_t of 4 bytes, a malicious BMP file with specific dimensions can cause this multiplication to overflow and wrap to zero. The overflow check added to address CVE-2025-57803 is placed after the overflow occurs, making it ineffective. A specially crafted 58-byte BMP file with width set to 536,870,912 and 32 bits per pixel can trigger this overflow, causing the bytes_per_line calculation to become zero. This vulnerability only affects 32-bit builds of ImageMagick where default resource limits for width, height, and area have been manually increased beyond their defaults. 64-bit systems with size_t of 8 bytes are not vulnerable, and systems using default ImageMagick resource limits are not vulnerable. The vulnerability is fixed in versions 7.1.2-7 and 6.9.13-32.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","score":5.9,"severity":null}],"references":["https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm","https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34893","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 17, 2025, 4:30:27 PM","dateUpdated":"Nov 3, 2025, 5:45:24 PM"},"relatedAdvisories":[{"id":"WID-SEC-W-2025-2339","title":"ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service","vulnerabilityIds":["CVE-2025-62171"]},{"id":"openSUSE-SU-2025:15650-1","title":"ImageMagick-7.1.2.7-1.1 on GA media","vulnerabilityIds":["CVE-2025-62171"]},{"id":"SUSE-SU-2025:3844-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-62171"]},{"id":"SUSE-SU-2025:3796-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-62171"]},{"id":"openSUSE-SU-2025:20162-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-55212","CVE-2025-55298","CVE-2025-57803","CVE-2025-57807","CVE-2025-62171","CVE-2025-62594"]},{"id":"SUSE-SU-2025:21211-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-55212","CVE-2025-55298","CVE-2025-57803","CVE-2025-57807","CVE-2025-62171","CVE-2025-62594"]},{"id":"RHSA-2026:3058","title":"Red Hat Security Advisory: ImageMagick security update","vulnerabilityIds":["CVE-2025-62171","CVE-2026-23876"]},{"id":"SUSE-SU-2025:3918-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-62171"]},{"id":"SUSE-SU-2025:3867-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2025-62171"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-34893","identifiers":["EUVD-2025-34893","CVE-2025-62171","GHSA-9pp9-cfwx-54rm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}