CVE-2026-46522: ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

May 18, 2026 (updated June 11, 2026)

Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7gg8-qqx7-92g5
github.com/advisories/GHSA-7gg8-qqx7-92g5
nvd.nist.gov/vuln/detail/CVE-2026-46522

Code Behaviors & Features

Detect and mitigate CVE-2026-46522 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →