Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD2.3 Low

CVE-2026-93588

ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory (resource) limit at a specific point during processing, the failed allocation is not handled and a NULL pointer is dereferenced, which can lead to a denial of service (application crash) when processing a specially crafted or sufficiently large PNM image.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-31affected
  • 7.1.2-31unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-56affected
  • 6.9.13-56unaffected

References