Vulnerability Description
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion command. Version 7.1.2-0 fixes the issue.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Imagemagick | Imagemagick | >= 7.1.1-7, < 7.1.2-0 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1iegkwlTjqnJTtM4XkiheYsjKsC6pxtId/view?usp=shariExploit
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vmhh-8rxq-fpExploitVendor Advisory
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vmhh-8rxq-fpExploitVendor Advisory
FAQ
What is CVE-2025-53015?
CVE-2025-53015 is a vulnerability with a CVSS score of 7.5 (HIGH). ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0, infinite lines occur when writing during a specific XMP file conversion com...
How severe is CVE-2025-53015?
CVE-2025-53015 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53015?
Check the references section above for vendor advisories and patch information. Affected products include: Imagemagick Imagemagick.