PT-2026-107982

CVE-2026-105823

·

Published

2026-10-08

·

Updated

2026-10-25

Description by

CVSS 3.1
4.0
Medium
MetricsAV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31
Description The CUT encoder lacks a security policy check, which allows configured security policies to be bypassed. An attacker can provide specially crafted input to be processed by the CUT encoder, potentially leading to an application crash or the leakage of sensitive data.
Recommendations Update to version 6.9.13-56 or later. Update to version 7.1.2-31 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-R868-PMWH-FV2C
CLSA-2026-1791887798
CLSA-2026-1791888827
CLSA-2026-1791903924
CLSA-2026-1791904140
CLSA-2026-1791905030
CLSA-2026-1791905425
CLSA-2026-1792096093
CLSA-2026-1792140497
CLSA-2026-1792591008
CLSA-2026-1792591590
CLSA-2026-1792591674
OPENSUSE-SU-2026:12139-1
Found an issue in the description? Have something to add? Feel free to write us 👾