Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 618
Alerts This Week
Warning Icon 1 618

SUSE: ImageMagick Important Heap Buffer Overflow Fixes 2025:03150-1

suse
Calendar Grey September 10, 2025
Dist Suse Esm H88
Crucial patch released for ImageMagick in SUSE tackling several security flaws; updates are now accessible.
* bsc#1248077 * bsc#1248078 * bsc#1248079 * bsc#1248767 * bsc#1248780

Summary

## This update for ImageMagick fixes the following issues: * CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077). * CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage (bsc#1248078). * CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079). * CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry` (bsc#1248767). * CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780). * CVE-2025-57803: Fixed heap out-of-bounds (OOB) write due to 32-bit integer overflow (bsc#1248784). ## Patch Instructions:

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow integer overflow imagemagick

References

* bsc#1248077

* bsc#1248078

* bsc#1248079

* bsc#1248767

* bsc#1248780

* bsc#1248784

Cross-

* CVE-2025-55005

* CVE-2025-55154

* CVE-2025-55160

* CVE-2025-55212

* CVE-2025-55298

* CVE-2025-57803

CVSS scores:

* CVE-2025-55005 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55005 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-55005 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2025-55154 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55154 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-55154 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-55154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03150-1
Release Date: 2025-09-10T17:58:53Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow integer overflow imagemagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.