CVE-2026-30931

medium Red Hat
CVSS v3 Base Score
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Published: March 9, 2026
Last Modified: March 9, 2026
Vendor: Red Hat

Description

A flaw was found in ImageMagick, a software used for editing and manipulating digital images. A local attacker can exploit a heap-based buffer overflow vulnerability within the UHDR encoder. This vulnerability arises from the truncation of a value, enabling an out-of-bounds write. Successful exploitation could lead to a denial of service, making the software unavailable, and potentially result in information disclosure.

CWE

CWE-190

Affected Products

Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7

References