CVE Database›Document archive›CVE-2026-62946

CVE-2026-62946

Imagemagick: ImageMagick: Denial of Service via integer overflow in JNX decoder on 32-bit systems

Loading…

Severity

Moderate

Red Hat Product Security

5.1

CVSS 3.1

Review impact separately from score.

Published · July 30, 2026

Updated · August 4, 2026

Description

A flaw was found in ImageMagick. When processing extremely large JNX image files on 32-bit systems, an attacker could trigger an integer overflow. This overflow leads to a heap buffer over-write, which can cause the application to crash, resulting in a denial of service.

Statement

This Moderate impact flaw in ImageMagick affects 32-bit systems, where processing an exceptionally large JNX image file can trigger an integer overflow. This leads to a heap buffer overwrite, causing a denial of service. The vulnerability requires local access and has high attack complexity, limiting its broader exploitability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, avoid processing untrusted JNX image files with ImageMagick on 32-bit systems. Restricting ImageMagick's exposure to untrusted or excessively large JNX files can reduce the risk of a denial of service.

CVSS / CWE

CVSS 3.1 · 5.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 · Integer Overflow or Wraparound