Critical Integer Overflow Vulnerability in GraphicsMagick Affects SUSE Systems

A significant integer overflow vulnerability (CVE-2025-55154) has been identified in GraphicsMagick, affecting various SUSE Linux distributions. This flaw occurs during magnified size calculations in the ReadOneMNGIMage function, potentially leading to out-of-bounds writes. The vulnerability has been rated as important, with CVSS scores indicating a high severity level. Affected systems include openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP7. Administrators are advised to apply the patch immediately using SUSE's recommended installation methods. The vulnerability was published on August 13, 2025, and has been assigned a bug reference number (bsc#1248078). The patch addresses this critical issue, and users should ensure their systems are updated to mitigate any risks associated with this vulnerability.

Key Points: • CVE-2025-55154 is a critical integer overflow vulnerability in GraphicsMagick. • Affected systems include openSUSE Leap 15.6 and SUSE Linux Enterprise Server 15 SP7. • Administrators should apply the patch immediately to prevent potential exploitation.