CVE-2026-30937

medium Red Hat
CVSS v3 Base Score
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Published: March 9, 2026
Last Modified: March 9, 2026
Vendor: Red Hat

Description

A flaw was found in ImageMagick, a software suite for editing and manipulating digital images. An integer overflow vulnerability exists in the XWD (X Windows) encoder when processing extremely large images. This flaw can lead to an undersized memory allocation, resulting in an out-of-bounds write to the heap. A local attacker could exploit this to cause a denial of service (DoS) or potentially impact data integrity.

CWE

CWE-190

Affected Products

Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7

References