Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: ImageMagick Important Heap Overflow Fix 2025:03164-1 CVE-2025-55005

suse
Calendar Grey September 11, 2025
Dist Suse Esm H88
Crucial patch released for ImageMagick addresses numerous vulnerabilities covering heap overflow risks and buffer mistakes specifically for SUSE clients.
* bsc#1247475 * bsc#1248076 * bsc#1248077 * bsc#1248078 * bsc#1248079

Summary

## This update for ImageMagick fixes the following issues: * CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels (bsc#1248076). * CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077). * CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage (bsc#1248078). * CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079). * CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to `montage -geometry` (bsc#1248767). * CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780).

Topics%20covered

Topics Covered

security advisory security issue SuSE important heap overflow imagemagick

References

* bsc#1247475

* bsc#1248076

* bsc#1248077

* bsc#1248078

* bsc#1248079

* bsc#1248767

* bsc#1248780

* bsc#1248784

Cross-

* CVE-2025-55004

* CVE-2025-55005

* CVE-2025-55154

* CVE-2025-55160

* CVE-2025-55212

* CVE-2025-55298

* CVE-2025-57803

CVSS scores:

* CVE-2025-55004 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55004 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

* CVE-2025-55004 ( NVD ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

* CVE-2025-55004 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

* CVE-2025-55005 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-55005 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03164-1
Release Date: 2025-09-11T11:06:46Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SuSE important heap overflow imagemagick

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here