Skip to content
SUSE Issues Security Advisories for libheif and ImageMagick Vulnerabilities

SUSE Issues Security Advisories for libheif and ImageMagick Vulnerabilities

First seen 29 Sep 2026, 03:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 05:09 UTC
  • •SUSE released critical updates for libheif and ImageMagick on September 29, 2026.
  • •The updates address multiple vulnerabilities, including CVE-2020-6851 and CVE-2026-62343.
  • •CISA confirms exploitation of related Linux firewall vulnerabilities.

On September 29, 2026, SUSE released important security updates for libheif and ImageMagick, addressing multiple vulnerabilities. The libheif update resolves issues including heap out-of-bounds reads and a heap-use-after-free vulnerability, with CVE-2020-6851 being notable. The ImageMagick update fixes several heap buffer over-writes and memory leaks, including CVE-2026-62343 and CVE-2026-86420. Both advisories highlight potential exploitation risks, with CISA confirming exploitation of a Linux firewall flaw. Users of SUSE Linux Enterprise Desktop 15 SP7, Server 15 SP7, and other related systems are urged to apply the updates. The vulnerabilities could lead to severe impacts, including denial of service and memory corruption. The updates were released shortly after the vulnerabilities were disclosed, indicating a proactive response from SUSE.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2020-01-13
CVE-2020-6851 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25797 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-25
CVE-2026-66011 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-29
CVE-2026-62343 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-29
CVE-2026-64685 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-30
CVE-2026-62363 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-30
CVE-2026-62946 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-07
CVE-2026-86421 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-07
CVE-2026-86420 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-28
SUSE releases libheif update
SUSE announced an update for libheif addressing several vulnerabilities, including CVE-2020-6851.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2020-6851 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 3