CVE-2026-46692

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A remote attacker, by connecting to a magick -distribute-cache service, can trigger a heap buffer over-write in the server process. This vulnerability can lead to a denial of service (DoS) due to memory corruption, potentially making the service unavailable.

Moderate: A heap buffer overwrite vulnerability in ImageMagick's magick -distribute-cache service allows a remote, unauthenticated attacker to cause a denial of service. This flaw requires the magick -distribute-cache service to be explicitly enabled and exposed, as it is not enabled by default in Red Hat products, limiting its impact to specific configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.