Wind River Support Network

HomeDefectsLIN1025-25632

Acknowledged

LIN1025-25632 : Security Advisory - imagemagick - CVE-2026-93590

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.
Data source: VulnCheck (disclosure@vulncheck.com)