CVE-2026-45664
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile — higher than 35% of all known CVEs
Summary
In ImageMagick prior to versions 6.9.13-47 and 7.1.2-22, a missing check in the MNG coder allows reading more images than the list limit policy permits, resulting in excessive resource consumption.
Risk Assessment
An attacker could exploit this vulnerability to cause a denial of service (DoS) by overwhelming the system with excessive memory or CPU usage.
Recommendation
Immediately update ImageMagick to version 6.9.13-47 or 7.1.2-22, which contain the fix for this vulnerability.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.