Bug 2549793 (CVE-2026-109264)
| Summary: | CVE-2026-109264 ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in ImageMagick. An attacker who controls a file name processed by the application can cause a Denial of Service (DoS) by crashing the process. This issue is caused by uncontrolled recursion within the Magick Vector Graphics (MVG) decoder, which exhausts available stack memory when parsing specific file names.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2550267 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-12 16:51:17 UTC
|