Stack Overflow Vulnerability in ImageMagick Software by ImageMagick Developers

CVE-2025-53101

What is CVE-2025-53101?

A vulnerability exists in ImageMagick versions prior to 7.1.2-0 and 6.9.13-26 that allows attackers to exploit the magick mogrify command. By specifying multiple consecutive %d format specifiers in the filename template, it triggers internal pointer arithmetic that may lead to a stack overflow due to an address calculation below the start of the stack buffer. This vulnerability can compromise the stability and security of applications utilizing ImageMagick for image processing.

References