Medium severity5.3NVD Advisory· Published Oct 8, 2026

CVE-2026-105402

Description

ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image processing.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-31

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v45j-x8p4-3mh4nvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-denial-of-service-via-xmp-profile-parsingnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000