Medium severity5.3NVD Advisory· Published Oct 8, 2026

CVE-2026-105404

Description

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by these coders.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <6.9.13-56, <7.1.2-31

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5rg6-j44q-q892nvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-31-code-injection-via-postscript-codersnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000