Low severity3.7NVD Advisory· Published Sep 18, 2026· Updated Oct 16, 2026
CVE-2026-93590
CVE-2026-93590
Description
ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: <7.1.2-31
- (no CPE)range: <7.1.2-31
- osv-coords2 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 7.1.2.0-160000.16.1+ 1 more
- (no CPE)range: < 7.1.2.0-160000.16.1
- (no CPE)range: < 7.1.2.31-2.1
Patches
Vulnerability mechanics
References
2- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cmnvdVendor Advisory
- www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-policy-bypass-in-uhdr-encodernvdThird Party Advisory
News mentions
0No linked articles in our index yet.