Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-06-10T22:00:26 ImageMagick: ImageMagick: Information disclosure via incorrect filename parsing 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N CWE-59

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. An attacker with local access could exploit an incorrect parsing of filenames to bypass security policies. This could allow the attacker to read files that are otherwise disallowed by the system's security configuration, leading to information disclosure.

This flaw in ImageMagick is rated as Low impact. It allows an attacker with local access and high privileges to bypass security policies through incorrect filename parsing. This could lead to the disclosure of files that are otherwise protected by the system's security configuration. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-49219 https://nvd.nist.gov/vuln/detail/CVE-2026-49219 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669