Medium severity5.3NVD Advisory· Published Oct 12, 2026
CVE-2026-109276
CVE-2026-109276
Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.
Affected products
1- Range: <6.9.13-57
Patches
Vulnerability mechanics
References
4- github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58anvd
- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4rnvd
- github.com/ImageMagick/ImageMagick6/commit/3875281ca0c5aa67b2bf0454725abf177c706b3bnvd
- www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-temporary-file-leak-in-jng-decodernvd
News mentions
0No linked articles in our index yet.