← All advisories

Low severity2.9NVD Advisory· Published Apr 23, 2025· Updated Jun 17, 2026

CVE-2025-43965

CVE-2025-43965

Description

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12

ImageMagick/Imagemagickllm-fuzzy2 versions
<7.1.1-44+ 1 more
- (no CPE)range: <7.1.1-44
- (no CPE)range: 0
osv-coords10 versions
pkg:apk/chainguard/imagemagick-6 pkg:apk/chainguard/imagemagick-6-dev pkg:apk/chainguard/imagemagick-6-doc pkg:apk/chainguard/imagemagick-6-static pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 0+ 9 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.1.1.21-150600.3.3.1
- (no CPE)range: < 7.1.1.21-150600.3.3.1
- (no CPE)range: < 7.1.0.9-150400.6.30.1
- (no CPE)range: < 7.1.1.21-150600.3.3.1
- (no CPE)range: < 7.1.1.43-150700.3.3.1
- (no CPE)range: < 6.8.8.1-71.204.1

Patches

Vulnerability mechanics

References

3

github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9nvdPatch
github.com/ImageMagick/Website/blob/main/ChangeLog.mdnvdRelease Notes
lists.debian.org/debian-lts-announce/2025/04/msg00035.htmlnvdMailing List

News mentions

0

No linked articles in our index yet.