Medium severity5.3NVD Advisory· Published Oct 8, 2026

CVE-2026-105827

Description

ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled recursion vulnerability in the CALS decoder due to a missing depth check. Attackers can supply a crafted CALS image that triggers unbounded recursion, exhausting the stack and crashing the process, resulting in a denial of service.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-30, <6.9.13-55

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfrnvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-stack-overflow-in-cals-decodernvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000