CVE-2026-109268

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32

Description A use after free issue exists in the PDF writer when processing CMYK images using JPEG2000 compression. A use after free occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. An attacker can provide a specially crafted CMYK image that, when written to PDF with JPEG2000 compression, causes the system to reuse freed memory, potentially resulting in a process crash.

Recommendations Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.