EUVD-2026-97584
GHSA-7vwq-g262-xfgj
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain low-privilege local access to ImageMagick host
-
ExploitInvoke INFO/JSON/YAML encoder writing to compressed stream
-
ExecutionTrigger type-confused file-handle dereference
-
ImpactCrash process via SIGABRT/SIGSEGV (DoS)
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Type safety enforcement
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires that ImageMagick write an image using the INFO, JSON, or YAML encoder (info:/json:/yaml: output coders) to an output that is NOT backed by a standard stdio FILE object - i.e. a compressed or blob-type stream (ZipStream, BZipStream, BlobStream, FIFO/custom stream), per the patched GetBlobFileHandle() switch. Limiting factors: the attacker needs local access (AV:L) and a low-privilege authenticated context (PR:L) sufficient to control the chosen encoder and destination stream, plus the deployment-dependent condition that the write targets a compressed/non-FILE stream (AT:P). Writes to ordinary file, pipe, or standard streams are unaffected, and impact is confined to crashing the single ImageMagick process - no data exposure or integrity loss. |
| Impact | This is a genuinely low-priority denial-of-service issue, and multiple signals agree. The vendor-supplied CVSS 4.0 vector (AV:L/AC:L/AT:P/PR:L/UI:N) scores only 2.0, reflecting local attack vector, a present attack requirement (AT:P - a specific non-FILE/compressed output stream must be in use), low-privilege authentication (PR:L), and impact limited to availability of a single process (VA:L; VC:N/VI:N). The CWE-843 type-confusion root cause does NOT lead to memory corruption with code-execution potential: the patched code shows GetBlobFileHandle() was returning a non-FILE pointer for compressed/blob/zip stream types, which the INFO/JSON/YAML encoders then dereferenced as a FILE*, producing a controlled SIGABRT/SIGSEGV rather than an exploitable primitive. No EPSS score, KEV listing, or public POC is present in the provided data. The 'Memory Corruption' tag overstates the real impact - this is a crash/abort, not a corruption-to-RCE path. Net: real but low severity; the local vector and stream-type precondition keep real-world risk well below the attention a high-CVSS flaw would warrant. |
| Exploit ScenarioDerived | An attacker who can influence an ImageMagick conversion job - for example a user permitted to choose the output coder and destination on a multi-user host or in a constrained service - directs an image write through the info:, json:, or yaml: encoder to a compressed or non-FILE-backed output stream. The encoder passes a mistyped pointer to an internal file-handle routine, dereferences it, and the ImageMagick process aborts with SIGABRT/SIGSEGV, denying service. No public exploit identified at time of analysis; exploitation requires local access and a low-privilege account. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 12, 2026
Denial of service in ImageMagick 6.x before 6.9.13-57 and 7.x before 7.1.2-32, where a type confusion in the INFO, JSON and YAML encoders lets a locally positioned low-privilege user crash the ImageMagick process (SIGABRT or SIGSEGV) when an image is written to a compressed or blob-backed output stream. The flaw is reached only when the write targets a non-FILE stream such as zip:, bzip2: or a blob/FIFO destination, so ordinary file, pipe and standard-stream output are unaffected; impact is limited to availability of the single process, with no confidentiality or integrity loss. This is a genuinely low-priority issue - the assessed vector is local, low-privilege and availability-only - and no public exploit identified at time of analysis, though vendor patches are available.
RemediationAI
Vendor-released patch: upgrade to ImageMagick 6.9.13-57 or 7.1.2-32 (or later) on the respective branch; distribution and downstream consumers should track the fixes shipped in the two upstream commits, af7b85012e62fa65393277790b96c56a98d882b6 for the 7.x line and a17cfd15af1038e3ef179016b41ad88e936b4487 for ImageMagick6, and consult GHSA-8xmr-6q99-c4x8 for the full patch set. Where immediate upgrading is not possible, the practical compensating control is to prevent ImageMagick from routing writes through the vulnerable coders into non-FILE streams: block use of compressed or blob destinations (zip:, bzip2:, blob:, FIFO/custom streams) with the info:, json: and yaml: output coders, or disable those coders entirely via an ImageMagick policy.xml entry such as <policy domain="coder" rights="none" pattern="INFO" /> (and equivalent JSON/YAML rules) - the trade-off being that this breaks legitimate verbose-identify and machine-readable metadata export workflows that depend on those formats. Additional hardening with low side effects: run ImageMagick under a dedicated low-privilege account with memory/CPU/disk resource limits so that a crash is contained to a single unprivileged process, and avoid exposing image-conversion pipelines that let untrusted callers choose both the output coder and the output stream type. Note that disabling the coders or restricting stream types only removes the trigger path and does not correct the underlying type confusion, so patching remains the primary fix.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-843 (type confusion) inside MagickCore/blob.c (magick/blob.c in ImageMagick6). The exported helper GetBlobFileHandle() unconditionally returned image->blob->file_info.file, a member of a union inside the BlobInfo structure that is only a valid stdio FILE* when the blob type is StandardStream, FileStream or PipeStream. For other stream types, including ZipStream, BZipStream, BlobStream, FifoStream, UndefinedStream and CustomStream, that union slot holds data of a different type, so the value is reinterpreted as a FILE* and passed to coders that dereference it. The INFO, JSON and YAML write coders (WriteINFOImage, WriteJSONImage, WriteYAMLImage) were the reachable callers, both directly calling GetBlobFileHandle(image) and, in the 7.x info coder, passing it into IdentifyImage(); passing a bogus FILE* into these routines produces undefined behaviour and typically a SIGABRT or SIGSEGV rather than silent corruption. The fix hardens GetBlobFileHandle() with a switch on image->blob->type that returns NULL for non-FILE-backed blobs plus assert-based validation, and updates each coder to check for NULL, close the blob and raise a new CoderDoesNotSupportThisStreamType coder error instead of proceeding. The patch set also corrects an unrelated integer-to-float conversion in the YAML channel-moments printer ((double) i+1.0) and adds the corresponding error message strings to the english.xml and francais.xml locale files.
Know when Imagemagick gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Local conversion with a low-privilege account controlling the coder/stream gives AV:L/PR:L; only the process crashes, so C:N/I:N and A:L.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Imagemagick
View allThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary fi
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of serv
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbit
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in cer
Heap buffer overflow in ImageMagick's XBM image decoder (ReadXBMImage) lets remote attackers write attacker-controlled d
Exploit-DB