Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.1%top 97%

ImageMagick: Schwachstelle ermöglicht Denial of Service

0
Medium
Published: 04/26/2026 (04/26/2026, 22:00:00 UTC)
Source: GCVE Database
Vendor/Project: Bundesamt für Sicherheit in der Informationstechnik
Product: Amazon

Description

A medium severity vulnerability (CVE-2026-42050) has been identified in ImageMagick, a suite of libraries and tools for processing graphics in many formats. The vulnerability allows for a denial of service condition. It affects multiple Linux distributions including Amazon Linux 2 and Debian, as well as open source versions of ImageMagick. There is no CVSS score available for this vulnerability. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/03/2026, 01:17:24 UTC

Technical Analysis

CVE-2026-42050 is a denial of service vulnerability in ImageMagick, a widely used graphics processing library and toolset. The vulnerability impacts various Linux distributions such as Amazon Linux 2 and Debian, as well as open source versions of ImageMagick. The Bundesamt für Sicherheit in der Informationstechnik and SUSE Product Security Team have published advisories referencing this issue. No detailed technical exploitation information or patch availability is provided in the current data.

Potential Impact

The vulnerability enables an attacker to cause a denial of service, potentially disrupting services or applications that rely on ImageMagick for image processing. There are no reports of active exploitation in the wild. The impact is limited to service availability degradation.

Mitigation Recommendations

Patch status is not yet confirmed — check the vendor advisory (SUSE-SU-2026:2389-1) and relevant Linux distribution security advisories for current remediation guidance. Until an official fix is available, monitor vendor communications for updates.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
SUSE Product Security Team
Advisory Id
SUSE-SU-2026:2389-1
Cve Count
1
Additional Cves
[]
Cvss Version
null

Threat ID: 6a2d2f9ce617e2d834b6fcf2

Added to database: 06/13/2026, 10:23:24 UTC

Last enriched: 07/03/2026, 01:17:24 UTC

Last updated: 07/31/2026, 19:22:58 UTC

Views: 113

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses