SUSE-SU-2025:02801-1: ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:02801-1 is a vulnerability in ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 14-08-2025PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for ImageMagick This update for ImageMagick fixes the following issues: - CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530) - CVE-2025-53015: Fixed specific XMP file conversion may cause an infinite loop (bsc#1246531) - CVE-2025-53019: Fixed format specifiers in a filename template may cause a memory leak (bsc#1246534) - CVE-2025-53101: Fixed input manipulation may lead to an out-of-bound write (bsc#1246529) Other fix: - Crop filename pattern %03d no longer works in ImageMagick 7 (bsc#1247475)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- ImageMagick&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7< 7.1.1.43-150700.3.8.1
- ImageMagick&distro=SUSE Linux Enterprise Module for Development Tools 15 SP7< 7.1.1.43-150700.3.8.1
1 vendor · 2 products