Low severity3.7NVD Advisory· Published Oct 12, 2026

CVE-2026-109272

Description

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-32

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722nvd
github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72nvd
www.vulncheck.com/advisories/imagemagick-7.1.1-31-before-7.1.2-32-null-pointer-dereference-in-postscript-decodernvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000