PT-2026-76340 · Julia · Imagemagick Jll

Published

2026-07-30

·

Updated

2026-07-30

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
A logic error in YUV sampling factor validation allows an invalid sampling factor to bypass checks and trigger a division-by-zero during image loading, resulting in a reliable denial-of-service.
coders/yuv.c:210:47: runtime error: division by zero
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3543373==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x000000000000 (pc 0x55deeb4d723c bp 0x7fffc28d34d0 sp 0x7fffc28d3320 T0)
  #0 0x55deeb4d723c in ReadYUVImage coders/yuv.c:210
  #1 0x55deeb751dff in ReadImage MagickCore/constitute.c:743
  #2 0x55deeb756374 in ReadImages MagickCore/constitute.c:1082
  #3 0x55deec682375 in CLINoImageOperator MagickWand/operation.c:4959
  #4 0x55deec6887ed in CLIOption MagickWand/operation.c:5473
  #5 0x55deec32843b in ProcessCommandOptions MagickWand/magick-cli.c:653
  #6 0x55deec32b99b in MagickImageCommand MagickWand/magick-cli.c:1392
  #7 0x55deec324d58 in MagickCommandGenesis MagickWand/magick-cli.c:177
  #8 0x55deead82519 in MagickMain utilities/magick.c:162
  #9 0x55deead828be in main utilities/magick.c:193
  #10 0x7fb90807fd8f in  libc start call main ../sysdeps/nptl/libc start call main.h:58
  #11 0x7fb90807fe3f in  libc start main impl ../csu/libc-start.c:392
  #12 0x55deead81974 in start (/data/ylwang/LargeScan/targets/ImageMagick/utilities/magick+0x22fb974)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: UNKNOWN SIGNAL coders/yuv.c:210 in ReadYUVImage
==3543373==ABORTING

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

JLSEC-2026-949

Affected Products

Imagemagick Jll