Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE: ImageMagick Important Update Heap Overflow Fix 2025:03113-1

suse
Calendar Grey September 9, 2025
Dist Suse Esm H88
This revision focuses on significant vulnerabilities in OpenSSL, underscoring the necessity for prompt software updates and fixes.
* bsc#1248076 * bsc#1248077 * bsc#1248078 * bsc#1248079 * bsc#1248767

Summary

## This update for ImageMagick fixes the following issues: * CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels (bsc#1248076). * CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077). * CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of-bounds write (bsc#1248078). * CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079). * CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry` (bsc#1248767). * CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability

Topics%20covered

Topics Covered

security advisory SuSE patch important heap overflow imagemagick

References

* bsc#1248076

* bsc#1248077

* bsc#1248078

* bsc#1248079

* bsc#1248767

* bsc#1248780

* bsc#1248784

Cross-

* CVE-2025-55004

* CVE-2025-55005

* CVE-2025-55154

* CVE-2025-55160

* CVE-2025-55212

* CVE-2025-55298

* CVE-2025-57803

CVSS scores:

* CVE-2025-55004 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55004 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

* CVE-2025-55004 ( NVD ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

* CVE-2025-55004 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

* CVE-2025-55005 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55005 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03113-1
Release Date: 2025-09-09T10:25:20Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE patch important heap overflow imagemagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here