3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-53019

CVE-2025-53019: ImageMagick has a Memory Leak in magick stream

Summary

In ImageMagick's magick stream command, specifying multiple consecutive %d format specifiers in a filename template causes a memory leak.

Details

Vulnerability Type: Memory leak
Affected Version: ImageMagick 7.1.1-47 (as of commit 82572afc, June 2025)

Reproduction

Tested Environment

Operating System: Ubuntu 22.04 LTS
Architecture: x86_64
Compiler: gcc with AddressSanitizer (gcc version: 11.4.0)

Reproduction Steps

# Clone source
git clone --depth 1 --branch 7.1.1-47 https://github.com/ImageMagick/ImageMagick.git ImageMagick-7.1.1
cd ImageMagick-7.1.1

# Build with ASan
CFLAGS="-g -O0 -fsanitize=address -fno-omit-frame-pointer" CXXFLAGS="$CFLAGS" LDFLAGS="-fsanitize=address" ./configure --enable-maintainer-mode --enable-shared && make -j$(nproc) && make install

# Trigger crash
./utilities/magick stream %d%d a a

Output

$ magick stream %d%d a a
stream: no decode delegate for this image format `' @ error/constitute.c/ReadImage/746.
stream: missing an image filename `a' @ error/stream.c/StreamImageCommand/755.

=================================================================
==114==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 152 byte(s) in 1 object(s) allocated from:
    #0 0x7fc4ebe58887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x7fc4eb563c5c in AcquireMagickMemory MagickCore/memory.c:559
    #2 0x7fc4eb563c82 in AcquireCriticalMemory MagickCore/memory.c:635
    #3 0x7fc4eb60c2be in AcquireQuantumInfo MagickCore/quantum.c:119
    #4 0x7fc4eb6b6621 in StreamImage MagickCore/stream.c:1335
    #5 0x7fc4eb09d889 in StreamImageCommand MagickWand/stream.c:292
    #6 0x7fc4eaf1295d in MagickCommandGenesis MagickWand/magick-cli.c:177
    #7 0x55a34f7c0a0c in MagickMain utilities/magick.c:153
    #8 0x55a34f7c0cba in main utilities/magick.c:184
    #9 0x7fc4ea38fd8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

Indirect leak of 64 byte(s) in 1 object(s) allocated from:
    #0 0x7fc4ebe5957c in __interceptor_posix_memalign ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:226
    #1 0x7fc4eb680e2f in AcquireSemaphoreMemory MagickCore/semaphore.c:154
    #2 0x7fc4eb680f30 in AcquireSemaphoreInfo MagickCore/semaphore.c:200
    #3 0x7fc4eb60d38d in GetQuantumInfo MagickCore/quantum.c:435
    #4 0x7fc4eb60c30e in AcquireQuantumInfo MagickCore/quantum.c:121
    #5 0x7fc4eb6b6621 in StreamImage MagickCore/stream.c:1335
    #6 0x7fc4eb09d889 in StreamImageCommand MagickWand/stream.c:292
    #7 0x7fc4eaf1295d in MagickCommandGenesis MagickWand/magick-cli.c:177
    #8 0x55a34f7c0a0c in MagickMain utilities/magick.c:153
    #9 0x55a34f7c0cba in main utilities/magick.c:184
    #10 0x7fc4ea38fd8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: 216 byte(s) leaked in 2 allocation(s).

Commits

Fixed in https://github.com/ImageMagick/ImageMagick/commit/fc3ab0812edef903bbb2473c0ee652ddfd04fe5c and https://github.com/ImageMagick/ImageMagick6/commit/d49460522669232159c2269fa64f73ed30555c1b

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-53019

CVE-2025-53019:

3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
Magick.NET-Q16-AnyCPU	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-AnyCPU	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-OpenMP-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-OpenMP-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-HDRI-x86	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-OpenMP-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-OpenMP-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q16-x86	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-AnyCPU	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-OpenMP-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-OpenMP-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-arm64	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-x64	nuget	< 14.7.0	14.7.0
Magick.NET-Q8-x86	nuget	< 14.7.0	14.7.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability analysis began by examining the provided commit patches that fix the reported memory leak in ImageMagick. The commits for both ImageMagick and ImageMagick6 point to the same logical flaw in the StreamImage function located in MagickCore/stream.c and magick/stream.c respectively.

The core of the vulnerability is an unconditional memory allocation within the StreamImage function. The line stream_info->quantum_info=AcquireQuantumInfo(image_info,(Image *) NULL); was executed every time the function was called. The vulnerability report indicates that using multiple format specifiers (e.g., %d%d) in the magick stream command triggers the leak. This implies that the StreamImage function is invoked multiple times during a single command execution under these conditions.

The patch introduces a conditional check (if (stream_info->quantum_info == (QuantumInfo *) NULL)) before the allocation. This ensures that AcquireQuantumInfo is only called on the first entry into the function, preventing subsequent calls from overwriting the pointer and leaking the memory from the previous allocation.

The provided ASan stack trace further confirms that the leak originates within StreamImage, which is called by StreamImageCommand as part of the magick stream utility's execution flow. Therefore, StreamImage is the precise location of the vulnerability.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

3.7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2025-53019: ImageMagick has a Memory Leak in magick stream

Summary

Details

Reproduction

Tested Environment

Reproduction Steps

Output

Commits

CVE-2025-53019:

3.7

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

3.7

3.7

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

CVE-2025-53019: ImageMagick has a Memory Leak in magick stream

Summary

Details

Reproduction

Tested Environment

Reproduction Steps

Output

Commits

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI