CVE-2026-28692

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A remote attacker could exploit a heap over-read vulnerability in the MAT decoder due to incorrect parenthesization when using 32-bit arithmetic. This could lead to the disclosure of sensitive information and a denial of service (DoS) condition.

This MODERATE impact vulnerability in ImageMagick stems from a heap buffer over-read within the MAT image decoder due to incorrect 32-bit arithmetic. Red Hat products, including Red Hat Enterprise Linux 6 ELS and 7 ELS, are affected if ImageMagick is used to process specially crafted MAT image files. Exploitation requires processing a malicious MAT image.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.