CVE-2026-25982

A flaw was found in ImageMagick, a software suite for image manipulation. When processing specially crafted DICOM (Digital Imaging and Communications in Medicine) files, a vulnerability allows the software to read beyond its intended memory boundaries. This can lead to a Denial of Service, causing the application to crash, or to Information Disclosure, potentially revealing sensitive data from the system's memory.

This MODERATE impact vulnerability in ImageMagick's DCM decoder allows for a heap out-of-bounds read when processing specially crafted DICOM files. This could lead to a denial of service or information disclosure. Red Hat Enterprise Linux and Community Projects are affected if ImageMagick is used to process untrusted DICOM images.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted DICOM files with ImageMagick. If ImageMagick is utilized by a network service, restrict access to that service to trusted users and networks.