CVE-2026-93588

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56

Description A NULL pointer dereference exists in the PNM coder. This occurs when the coder reaches a memory resource limit during processing and fails to handle the resulting failed allocation. An attacker can trigger a denial of service, resulting in an application crash, by providing a specially crafted or sufficiently large PNM image.

Recommendations Update to version 7.1.2-31 or later. Update to version 6.9.13-56 or later.