CVE-2026-33535
ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in X11 display interaction path
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 27, 2026
Updated · June 30, 2026
Description
A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local attacker could exploit an out-of-bounds write of a zero byte in the X11 display interaction path. This vulnerability, a type of memory corruption, could lead to a crash of the application, resulting in a Denial of Service (DoS).
Statement
Low impact. This flaw in ImageMagick's X11 display interaction path requires local access to trigger an out-of-bounds write, leading to a denial of service. Red Hat Enterprise Linux systems are affected if ImageMagick is installed and used in an X11 environment.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
For systems where ImageMagick is not required, especially in server environments without a graphical interface, consider removing the ImageMagick package to eliminate the attack surface. This action may impact applications that rely on ImageMagick for image processing.
CVSS / CWE
CVSS 3.1 · 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-787 · Out-of-bounds Write