Cloudanix VulnDB

CVE-2026-28691

High · 7.5

CVSS

7.5

EPSS

0.7%

Published

Mar 10, 2026

CISA due date

—

The record

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Module for Package Hub 15 SP7 GraphicsMagick 0 1.3.42-150600.3.15.1
SUSE:Linux Enterprise Server 15 SP6-LTSS ImageMagick 0 7.1.1.21-150600.3.50.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 15.6 GraphicsMagick 0 1.3.42-150600.3.15.1
openSUSE:Leap 15.6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 16.0 ImageMagick 0 7.1.2.0-160000.7.1
openSUSE:Tumbleweed ImageMagick 0 7.1.2.17-1.1

Related vulnerabilities