Title: An infinite loop vulnerability when parsing a PCD file CVE ID: CVE-2026-24485 Severity: High (7.5/10) CVSS v3 base metrics: Attack vector: Network Attack complexity: Low Privileges required: None User interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High Package: ImageMagick (C/C++) Affected versions: < 7.1.2-15 < 6.9.13-40 Patched versions: 7.1.2-15 6.9.13-40 Description: When a PCD file does not contain a valid marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. Weaknesses: CWE-400 (Uncontrolled Resource Consumption) Credits: Reporter: ylwango613