Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-07T15:28:50 ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-787

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixed in versions 6.9.13-56 and 7.1.2-31.

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service (DoS) by issuing a specially crafted call to the GetVirtualPixels function. An integer calculation error allows data to be written beyond allocated heap memory boundaries, resulting in an unexpected process crash.

Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Fix deferred ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-106571 https://nvd.nist.gov/vuln/detail/CVE-2026-106571 https://github.com/ImageMagick/ImageMagick/commit/8f3a15e60b723bfe3e80bd1b5e4bee88397467f7 https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq https://github.com/ImageMagick/ImageMagick6/commit/91f4ed74a1fd8326ade11a1153de110f22d89aa1 https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56