Cloudanix VulnDB

CVE-2026-30883

Medium · 5.7

CVSS

5.7

EPSS

0.1%

Published

Mar 10, 2026

CISA due date

—

The record

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Module for Package Hub 15 SP7 GraphicsMagick 0 1.3.42-150600.3.15.1
SUSE:Linux Enterprise Server 15 SP6-LTSS ImageMagick 0 7.1.1.21-150600.3.50.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 15.6 GraphicsMagick 0 1.3.42-150600.3.15.1
openSUSE:Leap 15.6 ImageMagick 0 7.1.1.21-150600.3.50.1
openSUSE:Leap 16.0 GraphicsMagick 0 1.3.45-160000.3.1
openSUSE:Leap 16.0 ImageMagick 0 7.1.2.0-160000.7.1
openSUSE:Tumbleweed GraphicsMagick 0 1.3.46-3.1
openSUSE:Tumbleweed ImageMagick 0 7.1.2.17-1.1

Related vulnerabilities