CVE-2026-22770

A flaw was found in ImageMagick. The BilateralBlurImage method improperly initializes a memory buffer. This can lead to the release of an invalid pointer if memory allocation fails. A remote attacker could exploit this vulnerability to cause a Denial of Service (DoS) by providing a specially crafted image, leading to application instability or crashes.

This vulnerability is rated Moderate for Red Hat products as it affects ImageMagick, a widely used image processing library. A flaw in the BilateralBlurImage method can lead to a release of an invalid pointer when memory allocation fails, potentially resulting in a denial of service. This issue impacts Red Hat Enterprise Linux 6 ELS, 7 ELS, and Community Projects like EPEL and Fedora.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted image files with ImageMagick. If ImageMagick is used in an automated or server-side context, consider implementing sandboxing mechanisms to limit the impact of potential exploitation. Restricting the sources of images processed by ImageMagick to trusted origins can also reduce exposure.