CVE-2026-47166

A flaw was found in ImageMagick, a widely used software for image editing. An attacker with high privileges and local access could exploit a vulnerability in the magick -distribute-cache service. By causing a heap buffer over-read, this could lead to the disclosure of sensitive information and potentially disrupt the availability of the service.

Moderate: This flaw in ImageMagick could lead to information disclosure and denial of service. Exploitation requires an attacker to have high privileges and local access to the system, specifically targeting the magick -distribute-cache service. This limits the overall risk in typical Red Hat Enterprise Linux deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.