CVE-2026-49218
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
In ImageMagick prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions, potentially causing crashes in other operations.
Risk Assessment
The risk involves potential crashes in applications processing DCM images, which may disrupt systems relying on ImageMagick.
Recommendation
Immediately update ImageMagick to version 6.9.13-48 or 7.1.2-24.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operation. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.