CVE-2026-106564

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service (DoS) by providing a specially crafted OpenEXR (EXR) image file. Due to improper bounds checking in the EXR decoder, processing the image causes the application to write beyond the allocated memory buffer and crash.

This vulnerability is rated as Moderate impact because successful exploitation terminates the parsing process, causing a denial of service without permitting unauthorized data access or code execution. A threat actor must supply an untrusted OpenEXR image to a service or user configured to ingest external graphics.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Disable processing of EXR image files through the ImageMagick security policy.