Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-10T21:53:35 ImageMagick: ImageMagick: Denial of Service via crafted image in subimage-search 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-835

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

A flaw was found in ImageMagick. A remote attacker could exploit an infinite loop vulnerability in the subimage-search operation by providing a specially crafted image. This could lead to a Denial of Service (DoS) condition, making the affected system or application unresponsive.

This Moderate impact denial of service flaw in ImageMagick arises from an infinite loop during subimage-search operations when processing a specially crafted image. While exploitation requires a user to process a malicious image, successful attacks can lead to the affected system or application becoming unresponsive, impacting availability. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-48733 https://nvd.nist.gov/vuln/detail/CVE-2026-48733 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m