PT-2025-50551 · Unknown+2 · Imagemagick+2

Published 2025-12-10 · Updated 2026-04-13 · CVE-2025-66628

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.2-9 and prior

Description ImageMagick is a software suite used for image creation, editing, composition, and conversion. A critical integer overflow exists in the TIM (PSX TIM) image parser's ReadTIMImage function (coders/tim.c) in affected versions. The issue occurs because the code calculates image size as 2 * width * height without overflow checks, where width and height are read from the file header as 16-bit values. On 32-bit systems, this calculation can overflow if width and height are large, leading to a small heap allocation and subsequent out-of-bounds read operations.

Recommendations Update to version 7.1.2-10 or later.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-03455

CVE-2025-66628

DLA-4429-1

GHSA-6HJR-V6G4-3FM8

OPENSUSE-SU-2025:15829-1

OPENSUSE-SU-2026:20118-1

SUSE-SU-2025:4427-1

SUSE-SU-2025:4428-1

SUSE-SU-2025:4429-1

SUSE-SU-2026:0011-1

SUSE-SU-2026:0013-1

SUSE-SU-2026:20183-1

Affected Products

Debian

Imagemagick

Red Os

References · 54

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66628.json · Exploit
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6hjr-v6g4-3fm8 · Vendor Advisory
• https://github.com/dlemstra/Magick.NET/commit/2dfa08e15cfd11016a79615994787b14f9048b1c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4429-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15829-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-66628 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03455 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-66628 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66628 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4429-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-66628 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-66628 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20183-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6hjr-v6g4-3fm8 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4427-1 · Vendor Advisory