CVE-2026-91418

A flaw was found in OpenJDK's ImageIO component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications utilizing ImageIO APIs. Successful exploitation can result in a partial Denial of Service (DoS), degrading application availability.

Red Hat has rated this vulnerability as Moderate because exploitation is limited to causing a partial denial of service, with no potential for unauthorized data disclosure or modification. In Red Hat Enterprise Linux environments, exposure is confined to Java applications that actively parse untrusted image assets through the standard ImageIO APIs. Workloads that do not accept or process external graphic files remain unaffected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.