Medium [CVE-2026-62946] Denial of Service via integer overflow in JNX decoder on 32-bit systems
This medium-severity Red Hat Linux advisory covers CVE-2026-62946 affecting Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat package: imagemagick.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write.
This issue has been fixed in versions 6.9.13-52 and 7.1.2-27. A flaw was found in ImageMagick.
This overflow leads to a heap buffer over-write, which can cause the application to crash, resulting in a denial of service. This Moderate impact flaw in ImageMagick affects 32-bit systems, where processing an exceptionally large JNX image file can trigger an integer overflow.
Red Hat severity: Moderate — CVSS 5.1 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-190.
Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
Red Hat does not currently list a fixing RHSA for this CVE.
Affected products named by the advisory: Red Hat package: imagemagick.
- < 6.9.13-52
- < 7.1.2-27
Official advisory · high-confidence parse· fetched 11 days ago·verify at source
- 6.9.13-52
- 7.1.2-27
Official advisory · high-confidence parse· fetched 11 days ago·verify at source
Mitigation checklist
- To mitigate this issue, avoid processing untrusted JNX image files with ImageMagick on 32-bit systems. Restricting ImageMagick's exposure to untrusted or excessively large JNX files can reduce the risk of a denial of service.
Official advisory · high-confidence parse· fetched 11 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.