Bug 2538880 (CVE-2026-93589)
| Summary: | CVE-2026-93589 ImageMagick: ImageMagick: Denial of Service via division by zero in FLIF encoder | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in ImageMagick. This vulnerability, located in the FLIF encoder, is caused by an incorrect value for 'ticks per second' in an image being encoded. This can lead to a division-by-zero error, causing the encoder to crash and resulting in a denial of service, which means the software becomes unavailable.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2539113, 2539114 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-09-22 21:02:59 UTC
|