Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-93590

ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 7.1.2-31affected
  • 7.1.2-31unaffected

References