CVE-2026-109282

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32

Description A type confusion flaw exists in the INFO, JSON, and YAML encoders. This occurs when an internal method receives a pointer of an unexpected type during the process of writing an image in a compressed format. An attacker can exploit this to trigger a SIGABRT or SIGSEGV, which crashes the process and results in a denial of service.

Recommendations Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.