CVE-2026-109280

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.0-20 through 7.1.2-31

Description A use after free issue exists in the -fx option. This occurs when a memory allocation fails during a specific operation. An attacker can provide crafted -fx expressions while the system is under memory pressure to trigger access to freed memory, which may lead to crashes or memory corruption.

Recommendations Update ImageMagick to version 7.1.2-32 or later. As a temporary mitigation, restrict the use of the -fx option.