CVE-2026-109271 — Vulnerability intelligence

imagemagick — imagemagick

Published: 2026-10-12T17:17:19.383

CVSS

6.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.

Sources

• CVE-2026-109271
• Patch
• Patch
• Vendor Advisory
• Third Party Advisory