ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end …
Exact source revision recorded 5 Nov 2026 02:01:21 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2025-27126
PublishedImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum + length (amortized) instead of offset + length, and copies to data + offset. When offset ≫ extent, the copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2⁶⁴ arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Sep 5, 2025, 9:16:02 PM
dateUpdated: Nov 3, 2025, 6:13:45 PM
7 related source bulletins · separate from aliases
SUSE-SU-2025:03616-1: Security update for ImageMagick
CVE-2025-57807
openSUSE-SU-2025:15543-1: ImageMagick-7.1.2.3-1.1 on GA media
CVE-2025-57807
SUSE-SU-2025:21211-1: Security update for ImageMagick
CVE-2025-55212 · CVE-2025-55298 · CVE-2025-57803 · CVE-2025-57807 · CVE-2025-62171 · CVE-2025-62594
WID-SEC-W-2025-1981: ImageMagick (MagickCore blob): Schwachstelle ermöglicht Codeausführung
CVE-2025-57807
SUSE-SU-2025:03510-1: Security update for ImageMagick
CVE-2025-57807
SUSE-SU-2025:03509-1: Security update for ImageMagick
CVE-2025-57807
openSUSE-SU-2025:20162-1: Security update for ImageMagick
CVE-2025-55212 · CVE-2025-55298 · CVE-2025-57803 · CVE-2025-57807 · CVE-2025-62171 · CVE-2025-62594
- Source published
- Sep 5, 2025, 9:16:02 PM (timezone not stated)
- Source modified
- Nov 3, 2025, 6:13:45 PM (timezone not stated)
- Observed here
- 5 Nov 2026 02:01:21 UTC
- Source terms
- ENISA EUVD · source terms and attribution apply
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.
EUVD CVSS 3.1 · 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L