Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_per_line (stride) to a tiny value while the per-row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the (overflowed) stride, so the first row immediately writes past its slot and into adjacent heap memory with attacker-controlled bytes. This is a classic, powerful primitive for heap corruption in common auto-convert pipelines. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
INFO
Published Date :
2025-08-26T17:25:59.148Z
Last Modified :
2026-02-26T17:48:11.006Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2025-57803 vulnerability.
| Vendors | Products |
|---|---|
| Imagemagick |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-57803.
