CVE-2026-48733
ImageMagick: ImageMagick: Denial of Service via crafted image in subimage-search
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 11, 2026
Updated · August 18, 2026
Description
A flaw was found in ImageMagick. A remote attacker could exploit an infinite loop vulnerability in the subimage-search operation by providing a specially crafted image. This could lead to a Denial of Service (DoS) condition, making the affected system or application unresponsive.
Statement
This Moderate impact denial of service flaw in ImageMagick arises from an infinite loop during subimage-search operations when processing a specially crafted image. While exploitation requires a user to process a malicious image, successful attacks can lead to the affected system or application becoming unresponsive, impacting availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')