NuGet/Magick.NET-Q16-HDRI-AnyCPU CVE-2025-55212: low 3.7

ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

Action: Upgrade Magick.NET-Q16-HDRI-AnyCPU to 14.8.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-fh55-q5pj-pxgw#NuGet/Magick.NET-Q16-HDRI-AnyCPU
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fh55-q5pj-pxgw
• https://nvd.nist.gov/vuln/detail/CVE-2025-55212
• https://github.com/ImageMagick/ImageMagick/commit/5f0bcf986b8b5e90567750d31a37af502b73f2af
• https://github.com/ImageMagick/ImageMagick
• https://github.com/ImageMagick/ImageMagick/blob/0ba1b587be17543b664f7ad538e9e51e0da59d17/MagickCore/geometry.c#L355
• https://github.com/ImageMagick/ImageMagick/blob/0ba1b587be17543b664f7ad538e9e51e0da59d17/MagickCore/resize.c#L4625-L4629
• https://github.com/dlemstra/Magick.NET/releases/tag/14.8.1
• https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html

CVE-2025-55212 · published 2025-08-26T15:27:25Z · modified 2025-11-03T21:54:13.245408Z · JSON