Search for vulnerabilities
Vulnerability details: VCID-29u1-jeu6-kbfa
Vulnerability ID VCID-29u1-jeu6-kbfa
Aliases CVE-2025-53019
GHSA-cfh4-9f7v-fhrc
Summary ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and 6.9.13-26 fix the issue.
Status Published
Exploitability 0.5
Weighted Severity 3.3
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-125 Out-of-bounds Read
CWE-404 Improper Resource Shutdown or Release
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 3.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-53019.json
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00051 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00069 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00079 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00079 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00079 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
epss 0.00079 https://api.first.org/data/v1/epss?cve=CVE-2025-53019
cvssv3.1 3.7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr LOW https://github.com/advisories/GHSA-cfh4-9f7v-fhrc
cvssv3.1 3.7 https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
generic_textual LOW https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
cvssv3.1 3.7 https://github.com/ImageMagick/ImageMagick
generic_textual LOW https://github.com/ImageMagick/ImageMagick
cvssv3.1 3.7 https://github.com/ImageMagick/ImageMagick6/commit/d49460522669232159c2269fa64f73ed30555c1b
generic_textual LOW https://github.com/ImageMagick/ImageMagick6/commit/d49460522669232159c2269fa64f73ed30555c1b
cvssv3.1 3.7 https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c
generic_textual LOW https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c
cvssv3.1 3.7 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
cvssv3.1_qr LOW https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
generic_textual LOW https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
ssvc Track https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
cvssv3.1 3.7 https://nvd.nist.gov/vuln/detail/CVE-2025-53019
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2025-53019
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-53019.json
https://api.first.org/data/v1/epss?cve=CVE-2025-53019
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53019
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
https://github.com/ImageMagick/ImageMagick
https://github.com/ImageMagick/ImageMagick6/commit/d49460522669232159c2269fa64f73ed30555c1b
https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c
1109339 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109339
2379949 https://bugzilla.redhat.com/show_bug.cgi?id=2379949
CVE-2025-53019 https://nvd.nist.gov/vuln/detail/CVE-2025-53019
GHSA-cfh4-9f7v-fhrc https://github.com/advisories/GHSA-cfh4-9f7v-fhrc
GHSA-cfh4-9f7v-fhrc https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
USN-7728-1 https://usn.ubuntu.com/7728-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-53019.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/dlemstra/Magick.NET/releases/tag/14.7.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/ImageMagick/ImageMagick
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/ImageMagick/ImageMagick6/commit/d49460522669232159c2269fa64f73ed30555c1b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-15T13:27:49Z/ Found at https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cfh4-9f7v-fhrc
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2025-53019
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.15786
EPSS Score 0.00051
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:22:08.510178+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/53xxx/CVE-2025-53019.json 37.0.0