Low severity3.7NVD Advisory· Published Sep 18, 2026

CVE-2026-93590

Description

ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-31

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cmnvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encodernvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000