The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1758042045 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address     below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions     7.1.2-0 and 6.9.13-26 fix the issue. (CVE-2025-53101)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick     versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream     offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum     + length (amortized) instead of offset + length, and copies to data + offset. When offset  extent, the     copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2     arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
    (CVE-2025-57807)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03509-1 advisory.

    - CVE-2025-57807: heap out-of-bounds?write?can lead to memory corruption (bsc#1249362).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21211-1 advisory.

    - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process     crash       (bsc#1252749).
    - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362).
    - CVE-2025-62171: incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
    - CVE-2025-55298: format string bug vulnerability can lead to heap overflow (bsc#1248780).
    - CVE-2025-57803: 32-bit integer overflow can lead to heap out-of-bounds (OOB) write (bsc#1248784).
    - CVE-2025-55212: division-by-zero in ThumbnailImage() when passing a geometry string containing only a     colon to       `montage -geometry` (bsc#1248767).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1775683048 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick     versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream     offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum     + length (amortized) instead of offset + length, and copies to data + offset. When offset  extent, the     copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2     arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
    (CVE-2025-57807)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder     (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing     a maliciously crafted image file. Any operation that reads or identifies an image can trigger the     overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and     6.9.13-38 fix the issue. (CVE-2026-23876)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10911:02 advisory.

    * CVE-2025-53101: fix heap OOB write in BlobStream
    * CVE-2025-57807: fix stack overflow through vsnprintf()
    * CVE-2025-55154: fix integer overflows in MNG magnification
    * CVE-2025-55212: fix division by zero in ThumbnailImage
    * CVE-2025-57803: fix 32-bit integer overflow when writing BMP scanline stride
    * CVE-2025-55298: fix format string bug leading to RCE or heap overflow     CVE(s):
    CVE-2025-53101     ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address     below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions     7.1.2-0 and 6.9.13-26 fix the issue.
    CVE-2025-57807     ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick     versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream     offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum     + length (amortized) instead of offset + length, and copies to data + offset. When offset  extent, the     copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2     arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
    CVE-2025-55154     ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are     unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27     and 7.1.2-1.
    CVE-2025-57803     ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP     encoders scanline-stride computation collapses bytes_per_line (stride) to a tiny value while the per-row     writer still emits 3  width bytes for 24-bpp images. The row base pointer advances using the (overflowed)     stride, so the first row immediately writes past its slot and into adjacent heap memory with attacker-     controlled bytes. This is a classic, powerful primitive for heap corruption in common auto-convert     pipelines. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.
    CVE-2025-55212     ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (:) to montage
    -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero     dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been     patched in versions 6.9.13-28 and 7.1.2-2.
    CVE-2025-55298     ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in     InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper     sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from     heap overflow to remote code execution. This issue has been patched in versions 6.9.13-28 and 7.1.2-2.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ImageMagick package has been released.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1775682890 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick     versions lower than 14.8.2 include insecure functions: SeekBlob(), which permits advancing the stream     offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum     + length (amortized) instead of offset + length, and copies to data + offset. When offset  extent, the     copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No 2     arithmetic wrap, external delegates, or policy settings are required. This is fixed in version 14.8.2.
    (CVE-2025-57807)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder     (ReadXBMImage) allows an attacker to write controlled data past the allocated heap buffer when processing     a maliciously crafted image file. Any operation that reads or identifies an image can trigger the     overflow, making it exploitable via common image upload and processing pipelines. Versions 7.1.2-13 and     6.9.13-38 fix the issue. (CVE-2026-23876)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015450 advisory.

    ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick     versions lower than 14.8.2 include  insecure functions: SeekBlob(), which permits advancing the stream     offset beyond the current end without increasing capacity, and WriteBlob(), which then expands by quantum     + length (amortized) instead of offset + length, and copies to data + offset. When offset  extent, the     copy targets memory beyond the allocation, producing a deterministic heap write on 64-bit builds. No     2 arithmetic wrap, external delegates, or policy settings are required. This is fixed in version     14.8.2.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03510-1 advisory.

    - CVE-2025-57807: heap out-of-bounds?write?can lead to memory corruption (bsc#1249362).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
359861	CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1758042045)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	critical
269966	SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:03509-1)	Nessus	SuSE Local Security Checks	2025/10/10	2026/6/26	critical
279361	SUSE SLES16: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:21211-1)	Nessus	SuSE Local Security Checks	2025/12/19	2026/6/25	critical
360880	CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1775683048)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	critical
282817	MiracleLinux 7 : ImageMagick-6.9.10.68-7.0.5.el7.AXS7 (AXSA:2025-10911:02)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	critical
332456	Photon OS 5.0: Imagemagick PHSA-2025-5.0-91-0664	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/8/8	critical
353036	CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1775682890)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	critical
272273	Photon OS 4.0: Imagemagick PHSA-2025-4.0-0898	Nessus	PhotonOS Local Security Checks	2025/11/4	2026/8/8	critical
310984	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-015450)	Nessus	Unity Linux Local Security Checks	2026/4/29	2026/4/29	critical
269963	SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:03510-1)	Nessus	SuSE Local Security Checks	2025/10/10	2026/6/26	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical