NuGet/Magick.NET-Q8-x86 CVE-2025-57803: high 7.5, EPSS 0.87%
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
Action: Upgrade Magick.NET-Q8-x86 to 14.8.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.8.1 | - |
Fixed versions
| 14.8.1 |
Sources
- osv: GHSA-mxvv-97wh-cfmm#NuGet/Magick.NET-Q8-x86
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mxvv-97wh-cfmm
- https://nvd.nist.gov/vuln/detail/CVE-2025-57803
- https://github.com/ImageMagick/ImageMagick/commit/2c55221f4d38193adcb51056c14cf238fbcc35d7
- https://github.com/ImageMagick/ImageMagick
- https://github.com/dlemstra/Magick.NET/releases/tag/14.8.1
- https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html
CVE-2025-57803 · published · modified · JSON