CVE-2025-46393

What it actually does

Mishandling of packet_size during multispectral MIFF image processing leads to memory corruption when channels are rendered in an arbitrary order.

Why it matters to the business

Attackers may crash image-processing applications or achieve code execution, disrupting workflows that rely on ImageMagick for handling image files.

How an attack unfolds

An attacker creates a malicious multispectral MIFF image that triggers incorrect packet_size handling; when the image is processed and channels are rendered out of expected order, memory corruption occurs that can be leveraged for exploitation.

How to fix it

Upgrade ImageMagick to the version containing commit 81ac8a0d2eb21739842ed18c48c7646b7eef65b8 or newer.

How to confirm the fix worked

Confirm the installed build includes commit 81ac8a0d2eb21739842ed18c48c7646b7eef65b8; test processing of multispectral MIFF images for absence of corruption.

Typical attack path

1. Craft a multispectral MIFF image that exploits packet_size mishandling
2. Supply the image to an application using the vulnerable ImageMagick library
3. Trigger image decoding and channel rendering
4. Leverage resulting memory corruption to crash the process or execute code

How to detect it

Review application and system logs for ImageMagick crashes or memory errors during MIFF file processing; correlate with unexpected process terminations.

What your security team should do

• Apply the fixed commit or newer ImageMagick build to all affected systems
• Scan codebases and containers for usage of the vulnerable version
• Implement input validation or sandboxing for untrusted image files until patched