CVE-2025-55212

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (":") to montage -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

PUBLISHED Reserved 2025-08-08 | Published 2025-08-26 | Updated 2025-08-26 | Assigner GitHub_M

Problem types

CWE-369: Divide By Zero

Product status

References

github.com/...Magick/security/advisories/GHSA-fh55-q5pj-pxgw

github.com/...ommit/5f0bcf986b8b5e90567750d31a37af502b73f2af

github.com/...664f7ad538e9e51e0da59d17/MagickCore/geometry.c

github.com/...3b664f7ad538e9e51e0da59d17/MagickCore/resize.c

github.com/dlemstra/Magick.NET/releases/tag/14.8.1

cve.org (CVE-2025-55212)

nvd.nist.gov (CVE-2025-55212)

Download JSON