Cloudanix VulnDB

CVE-2026-28690

Medium · 6.9

CVSS

6.9

EPSS

0.1%

Published

Mar 10, 2026

CISA due date

—

The record

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Server 15 SP6-LTSS ImageMagick 0 7.1.1.21-150600.3.50.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 15.6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 16.0 GraphicsMagick 0 1.3.45-160000.3.1
openSUSE:Leap 16.0 ImageMagick 0 7.1.2.0-160000.7.1
openSUSE:Tumbleweed GraphicsMagick 0 1.3.46-4.1
openSUSE:Tumbleweed ImageMagick 0 7.1.2.17-1.1

Related vulnerabilities