CVE Database›Document archive›CVE-2026-42050

CVE-2026-42050

ImageMagick: ImageMagick: Denial of Service due to an overflow vulnerability in MIFF file processing

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 12, 2026

Updated · August 18, 2026

Description

A flaw was found in ImageMagick. A user opening a specially crafted MIFF (Magick Image File Format) file in the display tool and right-clicking a tile to invoke the Load / Update menu item could trigger an overflow vulnerability. This overflow could lead to a denial of service, making the application unavailable.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Users should avoid opening or interacting with untrusted MIFF (Magick Image File Format) files using the ImageMagick display tool. If the ImageMagick package is not essential for image display or other critical system functions, consider removing it. Be aware that removing ImageMagick may impact other applications that rely on its image processing capabilities.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-131 · Incorrect Calculation of Buffer Size