CVE-2026-109272

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-109272
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109272.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-109272
Aliases
  • GHSA-58h4-rwr6-wj72
Downstream
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (1)
UBUNTU (1)
Related
Published
2026-10-12T16:04:38Z
Modified
2026-10-28T11:06:25Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder
Details

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-476"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109272.json"
}
References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type
GIT
Repo
https://github.com/imagemagick/imagemagick
Events
Introduced
2f6d2de838390a054af74822e80d74b7799633cb
Fixed
ad98b244c995d2e3051757fa3b7855f45b550d24
Fixed
d98509b23a547d9ccd0a8af8650d03c5c01c3722
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "7.1.1-31"
                },
                {
                    "fixed": "7.1.2-32"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "d98509b23a547d9ccd0a8af8650d03c5c01c3722"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

7.*
7.1.1-31
7.1.1-32
7.1.1-33
7.1.1-34
7.1.1-35
7.1.1-36
7.1.1-37
7.1.1-38
7.1.1-39
7.1.1-40
7.1.1-41
7.1.1-43
7.1.1-44
7.1.1-45
7.1.1-46
7.1.1-47
7.1.2-0
7.1.2-1
7.1.2-10
7.1.2-11
7.1.2-12
7.1.2-13
7.1.2-14
7.1.2-15
7.1.2-16
7.1.2-17
7.1.2-18
7.1.2-19
7.1.2-2
7.1.2-20
7.1.2-21
7.1.2-22
7.1.2-23
7.1.2-24
7.1.2-25
7.1.2-26
7.1.2-27
7.1.2-28
7.1.2-29
7.1.2-3
7.1.2-30
7.1.2-31
7.1.2-5
7.1.2-6
7.1.2-7
7.1.2-8
7.1.2-9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109272.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "232666965143691801746905532185990285922",
            "length": 7631
        },
        "id": "CVE-2026-109272-152e3463",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722",
        "target": {
            "file": "coders/ps.c",
            "function": "ReadPSInfo"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "112118941733309536658497582931099916900",
                "241015580116110948010631847650988777306",
                "184381291335949856189174182244780582444",
                "332019227964277341992748138815338498800"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-109272-92acadc0",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722",
        "target": {
            "file": "coders/ps.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:06:25Z"