Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-06-30T22:08:36 Imagemagick: ImageMagick - Division by Zero in Binomial Kernel Processing 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CWE-190

ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing integer overflow, resulting in division by zero and application crash.

A Denial of Service (DoS) vulnerability exists in ImageMagick. An attacker can crash the application and cause service unavailability by submitting a maliciously crafted image.

This flaw in ImageMagick is rated as Low impact. An attacker can trigger a denial of service by providing a specially crafted image that, when processed, causes an integer overflow and subsequent division by zero. This issue requires user interaction, as the vulnerable ImageMagick instance must process the malicious input. To mitigate this vulnerability, avoid processing untrusted or unverified image files with ImageMagick. Implement robust input validation and sanitization for any image processing workflows that handle external content. Consider running ImageMagick within a sandboxed environment to further limit the impact of potential denial of service attacks. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-56363 https://nvd.nist.gov/vuln/detail/CVE-2026-56363 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vf33-6r7x-66xx https://www.vulncheck.com/advisories/imagemagick-division-by-zero-in-binomial-kernel-processing