GHSA-g5mf-wqq5-vwg6

ghsaUSosv

ImageMagick: Policy Bypass in MNG coder could

view advisory published 2026-05-18Licence: CC-BY-4.0

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-45664US	—	0.44% (38th)	—	2026-06-10
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder…

references

External citations — patches, advisories, analysis.

https://github.com/ImageMagick/ImageMagickPACKAGE
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-45664ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan