CVE-2025-62171

A vulnerability for an integer overflow has been identified in the ImageMagick image processing software suite on 32-bit systems with non-default resource limits. An attacker can exploit this flaw by providing a specially crafted malicious image file (BMP format) for processing. Successful exploitation leads to an out-of-bounds write, which could result in a denial of service by crashing the application.

This vulnerability is rated Moderate for Red Hat because it only affects 32-bit builds of ImageMagick. Exploitation requires that default resource limits for image processing (width, height, and area) have been manually increased beyond their defaults. Red Hat Enterprise Linux systems running 64-bit builds of ImageMagick or using default resource limits are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that ImageMagick is configured with its default resource limits for image width, height, and area. Avoid manually increasing these limits beyond their defaults, especially on 32-bit systems. If 32-bit ImageMagick is not a requirement, deploying 64-bit versions of ImageMagick will prevent this vulnerability.