SUSE-SU-2026:22829-1: ImageMagick&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:22829-1 is a vulnerability in ImageMagick&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 20-07-2026
   PublishedVulnerability first disclosed.
2. 28-07-2026
   Last modifiedVulnerability information updated.

Description

Security update for ImageMagick This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100). - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316). - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314). - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315). - CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006). - CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313). - CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312). - CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311). - CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294). - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

No weakness data has been published for this record.