Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-30T00:06:16 Imagemagick: ImageMagick: Denial of Service via integer overflow in JNX decoder on 32-bit systems 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-190

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27.

A flaw was found in ImageMagick. When processing extremely large JNX image files on 32-bit systems, an attacker could trigger an integer overflow. This overflow leads to a heap buffer over-write, which can cause the application to crash, resulting in a denial of service.

This Moderate impact flaw in ImageMagick affects 32-bit systems, where processing an exceptionally large JNX image file can trigger an integer overflow. This leads to a heap buffer overwrite, causing a denial of service. The vulnerability requires local access and has high attack complexity, limiting its broader exploitability. To mitigate this issue, avoid processing untrusted JNX image files with ImageMagick on 32-bit systems. Restricting ImageMagick's exposure to untrusted or excessively large JNX files can reduce the risk of a denial of service. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-62946 https://nvd.nist.gov/vuln/detail/CVE-2026-62946 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h22j-f9xw-xjjm