Skip to content
VulniPulse
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-62946

CVE-2026-62946: 1 tracked advisory record across Red Hat. Compare source-reported impact, fixes and remediation.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityMedium5.1

    Medium [CVE-2026-62946] Denial of Service via integer overflow in JNX decoder on 32-bit systems

    CVE-2026-62946Source published Source updated

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27. A flaw was found in ImageMagick. This overflow leads to a heap buffer over-write, which can cause the application to crash, resulting in a denial of service. This Moderate impact flaw in ImageMagick affects 32-bit systems, where processing an exceptionally large JNX image file can trigger an integer overflow. Red Hat severity: Moderate — CVSS 5.1 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-190. Affected Red Hat products: Red Hat Enterprise…

    Affected products in this advisory
    • Red Hat Enterprise Linux 6
    • Red Hat Enterprise Linux 7
    • Red Hat package: imagemagick
    Source-reported affected versions
    • < 6.9.13-52
    • < 7.1.2-27
    Source-reported fixed versions
    • 6.9.13-52
    • 7.1.2-27
    Mitigation guidance
    • To mitigate this issue, avoid processing untrusted JNX image files with ImageMagick on 32-bit systems. Restricting ImageMagick's exposure to untrusted or excessively large JNX files can reduce the risk of a denial of service.

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery