NuGet/Magick.NET-Q8-AnyCPU CVE-2025-55154: high 8.8, EPSS 0.95%
imagemagick: integer overflows in MNG magnification
Action: Upgrade Magick.NET-Q8-AnyCPU to 14.8.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.8.0 | - |
Fixed versions
| 14.8.0 |
Sources
- osv: GHSA-qp29-wxp5-wh82#NuGet/Magick.NET-Q8-AnyCPU
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp29-wxp5-wh82
- https://nvd.nist.gov/vuln/detail/CVE-2025-55154
- https://github.com/ImageMagick/ImageMagick
- https://github.com/dlemstra/Magick.NET/releases/tag/14.8.0
- https://issuetracker.google.com/savedsearches/7155917
- https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html
CVE-2025-55154 · published · modified · JSON