Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-07T15:45:06 ImageMagick: ImageMagick: Information disclosure via security policy bypass 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-552

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.

A flaw was found in ImageMagick. This issue allows an attacker to bypass access controls and read restricted files, leading to unauthorized information disclosure. By supplying a specially crafted image to a system configured with security policies that restrict image decoders (the coder domain), the attacker can circumvent the policy and access prohibited data.

Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Fix deferred ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-106579 https://nvd.nist.gov/vuln/detail/CVE-2026-106579 https://github.com/ImageMagick/ImageMagick/commit/82f373fedb3425c83a239103ab86f4fa86fd49ac https://github.com/ImageMagick/ImageMagick/commit/dcdbbf4278fab20a32a4ad80e64cb95c368ca8dd https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vcjj-32hg-qpx5 https://github.com/ImageMagick/ImageMagick6/commit/ac85c8e0a319b1eaf4c3d05d326605f5bae723d6 https://github.com/ImageMagick/ImageMagick6/commit/c54667bfe605ebdc17c23cb70a26dbe00b338222 https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-56