LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2026-46522

imagemagick · imagemagick

Published
CVSS7.5
Severityhigh
WeaknessCWE-400
ExploitedNot in CISA KEV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder, a crafted file could cause an infinite loop resulting in CPU exhaustion. Versions 7.1.2.23 and 6.9.13-48 fix the issue.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-46522

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-46522.