CVE Database›Document archive›CVE-2026-33535

CVE-2026-33535

ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in X11 display interaction path

Loading…

Severity

Low

Red Hat Product Security

4

CVSS 3.1

Review impact separately from score.

Published · March 27, 2026

Updated · June 30, 2026

Description

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local attacker could exploit an out-of-bounds write of a zero byte in the X11 display interaction path. This vulnerability, a type of memory corruption, could lead to a crash of the application, resulting in a Denial of Service (DoS).

Statement

Low impact. This flaw in ImageMagick's X11 display interaction path requires local access to trigger an out-of-bounds write, leading to a denial of service. Red Hat Enterprise Linux systems are affected if ImageMagick is installed and used in an X11 environment.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

For systems where ImageMagick is not required, especially in server environments without a graphical interface, consider removing the ImageMagick package to eliminate the attack surface. This action may impact applications that rely on ImageMagick for image processing.

CVSS / CWE

CVSS 3.1 · 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-787 · Out-of-bounds Write