CVE-2026-46521

A flaw was found in ImageMagick. When processing an image with LZMA compression in the MIFF encoder, a missing check can lead to an out-of-bounds write. This vulnerability could allow an attacker to cause a denial of service (DoS) by providing a specially crafted image file, leading to application instability or crashes.

This Moderate impact flaw in ImageMagick allows an out-of-bounds write when processing specially crafted image files using LZMA compression within the MIFF encoder. While requiring user interaction to process a malicious image, this vulnerability could lead to a denial of service, causing application instability or crashes in Red Hat products that utilize ImageMagick for image manipulation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.