PT-2026-21648 · Unknown+1 · Imagemagick+1

·

CVE-2026-26283

·

Published

2026-02-23

·

Updated

2026-07-30

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. A continue statement within the JPEG extent binary search loop in the jpeg encoder can cause an infinite loop when writing persistently fails. This can lead to 100% CPU consumption and a process hang, resulting in a denial of service. The issue is triggered by a crafted image.
Recommendations Update to ImageMagick version 7.1.2-15 or later. Update to ImageMagick version 6.9.13-40 or later.

Exploit

Fix

DoS

Infinite Loop

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09372
CVE-2026-26283
ECHO-1291-4784-C718
GHSA-GWR3-X37H-H84V
JLSEC-2026-967
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1

Affected Products

Imagemagick
Red Os