PT-2026-107980
CVE-2026-105404
·
Published
2026-10-08
·
Updated
2026-10-25
Description by
CVSS 4.0
6.0
MediumMetricsAV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.13-56
ImageMagick versions prior to 7.1.2-31
Description
Code injection is possible in the PostScript coders because certain values are not properly escaped or trimmed during output. This allows attackers to embed arbitrary PostScript code into generated files by providing specially crafted values.
Recommendations
Update to version 6.9.13-56 or later.
Update to version 7.1.2-31 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾