ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-62171 · Microsoft / collected KEV context

EUVD-2025-34893

GHSA-9pp9-cfwx-54rm

cve-program · CVE-2025-62171

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
• https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00

euvd · EUVD-2025-34893

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
• https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00

nvd · CVE-2025-62171

• https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
• https://lists.debian.org/debian-lts-announce/2025/10/msg00019.html

osv · GHSA-9pp9-cfwx-54rm

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm
• https://nvd.nist.gov/vuln/detail/CVE-2025-62171
• https://github.com/ImageMagick/ImageMagick/commit/cea1693e2ded51b4cc91c70c54096cbed1691c00
• https://github.com/ImageMagick/ImageMagick
• https://github.com/dlemstra/Magick.NET/releases/tag/14.9.0
• https://lists.debian.org/debian-lts-announce/2025/10/msg00019.html

No related operational record is retained in the current change model.