Bug 2431037 (CVE-2026-22770) - CVE-2026-22770 ImageMagick: ImageMagick: Denial of Service due to improper pointer initialization
Summary: CVE-2026-22770 ImageMagick: ImageMagick: Denial of Service due to improper po...
Keywords:
Status: NEW
Alias: CVE-2026-22770
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2431044 2431045 2431046 2431047 2431051
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-01-20 02:01 UTC by OSIDB Bzimport
Modified: 2026-01-20 03:40 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-01-20 02:01:28 UTC 
ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the last element in the set is not properly initialized. This will result in a release of an invalid pointer inside DestroyBilateralTLS when the memory allocation fails. Version 7.1.2-13 contains a patch for the issue.
Note You need to log in before you can comment on or make changes to this bug.