Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2026:0437-1

SUSE-SU-2026:0437-1

UNKNOWN

Security update for ImageMagick

Published Feb 11, 2026

Modified 3 weeks ago

Fix available

Details

This update for ImageMagick fixes the following issues:

CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969).
CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).

Affected Packages(12 packages)

ImageMagick

SUSE Linux Enterprise Module for Desktop Applications 15 SP7SUSE Linux Enterprise Module for Development Tools 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-config-7-SUSE

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-config-7-upstream-limited

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-config-7-upstream-open

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-config-7-upstream-secure

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-config-7-upstream-websafe

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

ImageMagick-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

libMagick++-7_Q16HDRI5

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

libMagick++-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

libMagickCore-7_Q16HDRI10

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

Fixed in:

7.1.1.43-150700.3.33.1

References

https://bugzilla.suse.com/1256962

https://bugzilla.suse.com/1256969

https://bugzilla.suse.com/1256976

https://bugzilla.suse.com/1257076

https://www.suse.com/security/cve/CVE-2026-22770

https://www.suse.com/security/cve/CVE-2026-23874

https://www.suse.com/security/cve/CVE-2026-23876

https://www.suse.com/security/cve/CVE-2026-23952

https://www.suse.com/support/update/announcement/2026/suse-su-20260437-1/

Upstream

CVE-2026-22770 CVE-2026-23874 CVE-2026-23876 CVE-2026-23952

Related

CVE-2026-22770 CVE-2026-23874 CVE-2026-23876 CVE-2026-23952

Ecosystems

SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7

Timeline

PublishedFeb 11, 2026

ModifiedFeb 11, 2026

SUSE-SU-2026:0437-1 | Mondoo Vulnerability Intelligence