CVE-2026-25637

A flaw was found in ImageMagick. A remote attacker can exploit a memory leak in the ASHLAR image writer by providing a specially crafted image. This vulnerability causes small objects to be allocated but never freed, leading to the exhaustion of process memory and a Denial of Service (DoS).

The impact of this flaw is MODERATE. A memory leak in the ASHLAR image writer component of ImageMagick can be triggered by processing a specially crafted image. This could lead to resource exhaustion and denial of service. This affects Red Hat Enterprise Linux 6 ELS and 7 ELS.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, restrict ImageMagick's processing of untrusted or unverified image files. Where possible, process images from unverified sources within a sandboxed environment to contain potential resource exhaustion. Additionally, ensure that applications utilizing ImageMagick implement robust input validation for all image inputs.