CVE-2026-93586

A flaw was found in ImageMagick. A use-after-free vulnerability exists in the ImagesToBlob method due to an incorrectly updated pointer. A local attacker could exploit this vulnerability, leading to a limited availability impact, such as a crash of the affected process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted or maliciously crafted image files with ImageMagick. If applications must process untrusted images, consider running them within a sandboxed environment to contain potential crashes and limit the impact on system availability. Services utilizing ImageMagick should be restarted after any configuration changes to ensure the mitigation is applied.