PT-2026-41781 · Mng Coder+1 · Mng Coder+1

Osidb Bzimport · CVE-2026-45664 · Published 2026-05-16 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A missing check in the MNG coder allows for reading more images than the list limit policy permits, which can lead to excessive resource consumption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Uncontrolled Recursion

Weakness Enumeration

CWE-400

CWE-770

CWE-674

CWE-407

Related Identifiers

BDU:2026-08478

CVE-2026-45664

ECHO-2A36-45FA-CE19

GHSA-G5MF-WQQ5-VWG6

OESA-2026-2386

OESA-2026-2387

OESA-2026-2388

OESA-2026-2389

OESA-2026-2463

OPENSUSE-SU-2026:11061-1

OPENSUSE-SU-2026:21071-1

SUSE-SU-2026:22378-1

SUSE-SU-2026:2580-1

SUSE-SU-2026:2877-1

SUSE-SU-2026:3023-1

SUSE-SU-2026:3024-1

Affected Products

Mng Coder

Red Os

References · 164

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45664.json · Exploit
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46521 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-45664 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46693 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-45664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45358 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-45664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45624 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:21071-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2388 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11061-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2877-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g5mf-wqq5-vwg6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46520 · Security Note