CVE-2026-46557

A flaw was found in ImageMagick. A local attacker could exploit a missing depth check in the fx operation by providing a specially crafted argument. This could lead to a stack overflow, resulting in a denial of service (DoS) for the application.

This Low impact flaw in ImageMagick allows a local attacker to trigger a denial of service by providing a specially crafted argument to the fx operation. Exploitation requires local access and user interaction, limiting the attack vector to scenarios where untrusted local users can execute ImageMagick with arbitrary inputs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.