CVE-2026-45664

5.3 Moyenne

Publiée le 11/06/2026 à 00:16 · Modifiée le 23/07/2026 à 11:10 · Modifiée · Source : security-advisories@github.com

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.

Traduire en français

Produits concernés

ImageMagick
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Red Hat Enterprise Linux 6
Imagemagick imagemagick

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`
3.1	7.5 Élevée	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-400
CWE-407
CWE-674
CWE-770

Références

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:32961
https://access.redhat.com/security/cve/CVE-2026-45664
https://bugzilla.redhat.com/show_bug.cgi?id=2487732
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45664.json

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories