CVE-2026-105401
ImageMagick before 7.1.2-31 Heap Buffer Overflow in Distributed Pixel Cache Server
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a heap buffer over-write that crashes the server, causing denial of service.
| CWE | CWE-122 |
| Vendor | imagemagick |
| Product | imagemagick |
| Published | Oct 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for imagemagick imagemagick
Be the first to know when new medium vulnerabilities affecting imagemagick imagemagick are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
ImageMagick / ImageMagick
0 < 7.1.2-31
References
Credits
🔍 Nosiume