OPENSUSE-SU-2026:21426-1: ImageMagick&distro=openSUSE Leap 16.0 openSUSE
Vulnerability summary
OPENSUSE-SU-2026:21426-1 is a vulnerability in ImageMagick&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.
Advisory lineage
Upstream 15 · Downstream 0 · Related 15Timeline
- 22-07-2026PublishedVulnerability first disclosed.
- 24-07-2026Last modifiedVulnerability information updated.
Description
Security update for ImageMagick This update for ImageMagick fixes the following issues - CVE-2026-56375: Possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files (bsc#1268878). - CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title (bsc#1271496). - CVE-2026-61859: Policy Bypass in script operation due to missing checks (bsc#1271497). - CVE-2026-61860: Use-After-Free when freetype initialization fails (bsc#1271494). - CVE-2026-61862: Information Disclosure when printing profiles with debug enabled (bsc#1271493). - CVE-2026-61863: Memory Leak in TIFF encoder when a temporary file could not be created (bsc#1271492). - CVE-2026-61864: Memory Leak in color transformation to log colorspace when operation fails (bsc#1271491). - CVE-2026-61865: Memory Leak in hough lines operation when an operation fails (bsc#1271490). - CVE-2026-61866: Memory Leak in JNG encoder when a blob could not be opened (bsc#1271489). - CVE-2026-61867: Memory Leak in TIFF encoder when an allocation fails (bsc#1271488). - CVE-2026-61868: Memory Leak in YUV decoder when opening of blob fails (bsc#1271487). - CVE-2026-61869: Memory Leak in MIFF encoder when allocation fails (bsc#1271486). - CVE-2026-61871: Memory Leak in ICON decoder when allocation fails (bsc#1271485). - CVE-2026-61872: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- ImageMagick&distro=openSUSE Leap 16.0< 7.1.2.0-160000.13.1
1 vendor · 1 product