New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2026-24485

NVDCIRCLENISA

EUVD-2026-7456 · Published Feb 24, 2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

Technologies

Dlemstra Magick.NetImagemagick ImagemagickMagick.Net-Q8-Anycpu Magick.Net-Q8-AnycpuMagick.Net-Q16-Hdri-X86 Magick.Net-Q16-Hdri-X86Magick.Net-Q16-Openmp-Arm64 Magick.Net-Q16-Openmp-Arm64Magick.Net-Q16-Hdri-Arm64 Magick.Net-Q16-Hdri-Arm64Magick.Net-Q16-Openmp-X64 Magick.Net-Q16-Openmp-X64Magick.Net-Q8-Openmp-Arm64 Magick.Net-Q8-Openmp-Arm64Magick.Net-Q8-X64 Magick.Net-Q8-X64Magick.Net-Q8-Openmp-X64 Magick.Net-Q8-Openmp-X64Magick.Net-Q16-Arm64 Magick.Net-Q16-Arm64Magick.Net-Q16-Hdri-Anycpu Magick.Net-Q16-Hdri-AnycpuMagick.Net-Q16-Hdri-X64 Magick.Net-Q16-Hdri-X64Magick.Net-Q8-X86 Magick.Net-Q8-X86Magick.Net-Q16-X64 Magick.Net-Q16-X64Magick.Net-Q16-X86 Magick.Net-Q16-X86Magick.Net-Q16-Anycpu Magick.Net-Q16-AnycpuMagick.Net-Q16-Hdri-Openmp-Arm64 Magick.Net-Q16-Hdri-Openmp-Arm64Magick.Net-Q16-Openmp-X86 Magick.Net-Q16-Openmp-X86Magick.Net-Q8-Arm64 Magick.Net-Q8-Arm64Magick.Net-Q16-Hdri-Openmp-X64 Magick.Net-Q16-Hdri-Openmp-X64

Weaknesses

CWE-400

CVSS scores

  • v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Impact

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot