PT-2026-42812

CVE-2026-46693

·

Published

2026-05-21

·

Updated

2026-10-09

Description by

CVSS 3.1
4.1
Medium
MetricsAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)
Description A race condition in the magick -distribute-cache service allows a remote attacker to hijack a file descriptor within the server process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
Related identifiers
CVE-2026-46693
BDU:2026-09767
GHSA-4G75-9R48-JF92
CLSA-2026-1781605589
CLSA-2026-1781605653
CLSA-2026-1781606022
CLSA-2026-1781606042
CLSA-2026-1782314022
CLSA-2026-1782720378
CLSA-2026-1790182513
ECHO-D537-58D2-7E5E
JLSEC-2026-1019
OESA-2026-2386
OESA-2026-2387
OESA-2026-2388
OESA-2026-2389
OESA-2026-2463
OPENSUSE-SU-2026:11061-1
OPENSUSE-SU-2026:21071-1
SUSE-SU-2026:22378-1
SUSE-SU-2026:2580-1
SUSE-SU-2026:2877-1
SUSE-SU-2026:3023-1
SUSE-SU-2026:3024-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com