CVE-2026-25638

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A remote attacker could exploit this vulnerability by providing a specially crafted image file. This flaw occurs because the WriteMSLImage function in coders/msl.c returns early without releasing allocated resources, leading to a memory leak. This can result in a Denial of Service (DoS) condition, making the system or application unavailable.

A MODERATE impact memory leak exists in ImageMagick's MSL encoder, where unreleased resources can lead to denial of service due to resource exhaustion. This affects Red Hat Enterprise Linux 6 ELS and 7 ELS, where ImageMagick is used for image processing.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted MSL (Magick Scripting Language) files with ImageMagick. If ImageMagick is deployed in a server environment, consider implementing resource limits for processes handling image conversions to prevent complete resource exhaustion.