CVE-2026-48724

A flaw was found in ImageMagick. When processing a specially crafted image that uses a mask with the Floyd-Steinberg dithering method, a negative heap buffer overwrite can occur. This vulnerability could allow an attacker to cause a denial of service (DoS) by crashing the application.

This Moderate impact vulnerability in ImageMagick arises from a heap buffer overwrite when processing a specially crafted image with a mask and the Floyd-Steinberg dithering method. Exploitation requires user interaction, as an attacker must convince a local user to process a malicious image. Successful exploitation leads to a denial of service by crashing the application.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.