CVE-2025-43965

Summary

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.

Affected Software

Weaknesses

• CWE-131: CWE-131 Incorrect Calculation of Buffer Size

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/04/msg00035.html

References

• https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-44—2025-02-22
• https://github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9

• ←Previous
• Next→