CVE-2026-28493

A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image. This can lead to a Denial of Service (DoS) and potentially information disclosure.

This MODERATE impact vulnerability affects ImageMagick in Red Hat Enterprise Linux and Community Projects. An integer overflow in the SIXEL decoder can lead to an out-of-bounds write when processing a specially crafted image, potentially resulting in a denial of service or other undefined behavior.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted SIXEL image files with ImageMagick. If ImageMagick must process untrusted content, consider running it within a sandboxed environment to limit potential impact.