PT-2025-17627 · Unknown+6 · Imagemagick+6

Published 2025-04-22 · Updated 2026-02-03 · CVE-2025-43965

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.1-44

Description The issue concerns the mishandling of image depth in MIFF image processing after the use of SetQuantumFormat.

Recommendations For versions prior to 7.1.1-44, update to version 7.1.1-44 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-131

Related Identifiers

BDU:2025-04922

CVE-2025-43965

DLA-4139-1

MGASA-2025-0141

OESA-2025-1498

OESA-2025-1499

OESA-2025-1500

OESA-2025-1501

OESA-2025-1502

OPENSUSE-SU-2025_1464-1

OPENSUSE-SU-2025_1488-1

SUSE-SU-2025:01464-1

SUSE-SU-2025:02188-1

SUSE-SU-2025:1464-1

SUSE-SU-2025:1488-1

SUSE-SU-2025:1489-1

SUSE-SU-2025_01464-1

SUSE-SU-2025_02188-1

SUSE-SU-2025_1464-1

SUSE-SU-2025_1488-1

SUSE-SU-2025_1489-1

USN-8007-1

Affected Products

Astra Linux

Debian

Imagemagick

Linuxmint

Red Os

Suse

Ubuntu

References · 61

• https://github.com/ImageMagick/ImageMagick/commit/bac413a26073923d3ffb258adaab07fb3fe8fdc9 · Patch
• https://ubuntu.com/security/CVE-2025-68618 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1489-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4139-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01464-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8007-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43965 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04922 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-43965 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02188-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-43965 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43965 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46393 · Security Note