CVE-2026-93589
ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 18, 2026
Updated · October 17, 2026
Description
A flaw was found in ImageMagick. This vulnerability, located in the FLIF encoder, is caused by an incorrect value for 'ticks per second' in an image being encoded. This can lead to a division-by-zero error, causing the encoder to crash and resulting in a denial of service, which means the software becomes unavailable.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, avoid processing untrusted FLIF image files with ImageMagick. If processing untrusted images is necessary, consider implementing sandboxing mechanisms to isolate ImageMagick operations and limit the potential impact of a denial of service.
CVSS / CWE
CVSS 3.1 · 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero