CVE Database›Document archive›CVE-2026-93589

CVE-2026-93589

ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder

Loading…

Severity

Moderate

Red Hat Product Security

5.9

CVSS 3.1

Review impact separately from score.

Published · September 18, 2026

Updated · October 17, 2026

Description

A flaw was found in ImageMagick. This vulnerability, located in the FLIF encoder, is caused by an incorrect value for 'ticks per second' in an image being encoded. This can lead to a division-by-zero error, causing the encoder to crash and resulting in a denial of service, which means the software becomes unavailable.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, avoid processing untrusted FLIF image files with ImageMagick. If processing untrusted images is necessary, consider implementing sandboxing mechanisms to isolate ImageMagick operations and limit the potential impact of a denial of service.

CVSS / CWE

CVSS 3.1 · 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-369 · Divide By Zero