PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-109279

CVE-2026-109279

ImageMagick: ImageMagick: Denial of Service via race condition during security policy access

Loading…

Severity

Low

Red Hat Product Security

2.5

CVSS 3.1

Review impact separately from score.

Published · October 13, 2026

Updated · October 13, 2026

Description

A flaw was found in ImageMagick. Due to improper synchronization during concurrent security policy access, simultaneous reads and writes across multiple threads can trigger a race condition, leading to a heap buffer overwrite. An attacker capable of inducing concurrent security policy operations can exploit this issue to crash the application, resulting in a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.5
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-787 · Out-of-bounds Write