OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-109264

LOW · CVSS 3.7 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-12 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

ImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a stack overflow due to uncontrolled recursion in the MVG decoder, which can be exploited by an attacker through a specially crafted file name. This vulnerability can lead to a denial of service by crashing the ImageMagick process. Organizations using affected versions should prioritize patching to mitigate potential service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-109264
Severity
LOW
CVSS
3.7
EPSS
N/A

Original NVD Description

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service.