Integer Overflow Vulnerability in ImageMagick Affecting 32-bit Systems

CVE-2025-62171

What is CVE-2025-62171?

An integer overflow vulnerability in the BMP decoder of ImageMagick allows specially crafted BMP files to cause corrupted memory calculations on 32-bit systems. When large image dimensions are processed, an overflow can occur during the calculation of bytes per line, potentially leading to unexpected behavior or denial of service. This issue stems from improper checks in the BMP decoder and affects only those 32-bit builds where resource limits for image dimensions have been manually adjusted. Users are advised to upgrade to the fixed versions 7.1.2-7 or 6.9.13-32.

References