CVE-2026-106569

MEDIUM 5.3

ImageMagick: Denial of service in ASE decoder because of missing security checks

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. This issue is fixed in version 7.1.2-32.

CWE	CWE-770 CWE-789
Vendor	imagemagick
Product	imagemagick
Published	Oct 7, 2026
Last Updated	Oct 7, 2026

Stay Ahead of the Next One

Get instant alerts for imagemagick imagemagick

Be the first to know when new medium vulnerabilities affecting imagemagick imagemagick are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

ImageMagick / ImageMagick

< 7.1.2-32

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwj6-pm7x-3r63 github.com: https://github.com/ImageMagick/ImageMagick/commit/0691546106f4c7e8857da9f21a0e4a8f41915388 github.com: https://github.com/ImageMagick/ImageMagick/commit/5ecd5b047cee7ccfe4e14a733a0755c7b2a90c7d github.com: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32