CVE-2026-105824

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-55 ImageMagick versions prior to 7.1.2-30

Description A use-after-free issue exists in the RSVG decoder when the software is built without cairo support. A use-after-free occurs when a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. This is triggered when a decoding limit is reached while processing a specially crafted SVG file, causing the system to access freed memory and crash.

Recommendations Update ImageMagick to version 6.9.13-55 or later. Update ImageMagick to version 7.1.2-30 or later.