CVE-2026-105402

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31

Description A denial of service issue exists where attackers can disrupt image processing by supplying a crafted XMP profile. An XMP profile is a metadata standard used to store information about an image. By embedding a malicious profile, an attacker can trigger a failure during the determination of the numerator and denominator, resulting in the application crashing or hanging.

Recommendations Update to version 7.1.2-31 or later.