CVE-2026-26983

A flaw was found in ImageMagick, a software suite for editing and manipulating digital images. A remote attacker could exploit this vulnerability by providing a specially crafted image containing an invalid <map> element to the Magick Scripting Language (MSL) interpreter. This flaw causes a use-after-free, leading to an application crash and resulting in a Denial of Service (DoS).

MODERATE: This flaw in ImageMagick allows a use-after-free vulnerability when processing a specially crafted MSL <map> element. An attacker could provide a malicious image file, leading to a denial of service due to application crashes. This affects systems where ImageMagick is used to process untrusted image files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted or maliciously crafted image files with ImageMagick. If ImageMagick is used in a service, restrict access to trusted sources and ensure input validation is in place to prevent the processing of arbitrary or malformed MSL files.