ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.
{
"cna_assigner": "VulnCheck",
"cwe_ids": [
"CWE-843"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109282.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "7.0.0-0"
},
{
"fixed": "7.1.2-32"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"fixed": "af7b85012e62fa65393277790b96c56a98d882b6"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "6.9.13-57"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"fixed": "a17cfd15af1038e3ef179016b41ad88e936b4487"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109282.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "305478782536355463686779987409633620314",
"length": 1441
},
"id": "CVE-2026-109282-08a09ab2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/yaml.c",
"function": "PrintChannelMoments"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "52571613429188257960114975637507012402",
"length": 195
},
"id": "CVE-2026-109282-0faca665",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "magick/blob.c",
"function": "GetBlobFileHandle"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "321740123085479436517427982450423490581",
"length": 1368
},
"id": "CVE-2026-109282-1e4a035f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "coders/info.c",
"function": "WriteINFOImage"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "230931506504931486305135371268009036819",
"length": 1090
},
"id": "CVE-2026-109282-323311c2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/yaml.c",
"function": "WriteYAMLImage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"8365605251492863360646871915300194646",
"15426168505243114833124573273850000503",
"220508268176667439409531844430423181449",
"41682574320663861674488796464577317506",
"37986433365832281002955378822723476974",
"321651746985163186514413744577598366744",
"151426691347683003357600943057179677232",
"252521401374282412506220435785407632145",
"273682393172601739322795075495685740534",
"260819604631520993433994550740264730415",
"332392120674449786608377099054246389789",
"118436342435527338238302275187062909633"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-54871e56",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "coders/json.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "52571613429188257960114975637507012402",
"length": 195
},
"id": "CVE-2026-109282-607fbfe5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "MagickCore/blob.c",
"function": "GetBlobFileHandle"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "167876694923769719564040265186569106841",
"length": 1253
},
"id": "CVE-2026-109282-618fa536",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/json.c",
"function": "WriteJSONImage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"245907168355342386710576689281274185933",
"215103731460389842811680098689463664356",
"69751716024484657611479178200182060687",
"37986433365832281002955378822723476974",
"321651746985163186514413744577598366744",
"151426691347683003357600943057179677232",
"252521401374282412506220435785407632145",
"129333018583447093355956321405538686574",
"51909289035601683351815046701925756692",
"291049051534117603452531117915953031254",
"40489295402734259242057667194056178128",
"219542590075400964110208222664540949542"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-73e602cb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "coders/info.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"47574019922823576670695264526560372608",
"200932126917910153379913117018082658761",
"292227697026414205600296498158351984553",
"125000349120980924802213025268711757939",
"53523738224950134137191238809995883497",
"108207659662667528189364991932543370451",
"125500679907315964008800895245552409448"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-8964f8d0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "MagickCore/blob.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"245907168355342386710576689281274185933",
"215103731460389842811680098689463664356",
"69751716024484657611479178200182060687",
"151426691347683003357600943057179677232",
"252521401374282412506220435785407632145",
"106767932553757217233934165457726938408",
"50465456240127009979559103706742169271",
"25685309227175046589884576252294913579",
"285654096934503585961587676471350830838",
"189930687484639041954231652377267600114",
"25091201813732947072387091725176836233",
"116580860958638810889028486308309331128",
"328361030636500036290095728585720622367",
"86578998680178837173823833806075733538",
"59330120940846182516304915381511169586",
"80595890307615187135380096291449244375",
"70369551822551193859276851407302538159",
"73615358735896544415034277411544434824",
"268523405173169143037053162923591378217",
"139120046640384007076739029304495466751",
"72917692525516419603603744608983263542",
"331046836910276896607625002253456569557"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-9c825993",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/info.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "33170956113791572173080565121151897863",
"length": 1400
},
"id": "CVE-2026-109282-ac1d1de9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/info.c",
"function": "WriteINFOImage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"47574019922823576670695264526560372608",
"200932126917910153379913117018082658761",
"292227697026414205600296498158351984553",
"125000349120980924802213025268711757939",
"53523738224950134137191238809995883497",
"108207659662667528189364991932543370451",
"125500679907315964008800895245552409448"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-c1201237",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "magick/blob.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"81329915005657140970638741898452258606",
"117708375935125778864529804565883855241",
"73749452011460629099576947444130142969",
"273001199639458473598501854690016767840"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-d0b65390",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/json.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "220002939538474933505215012999631060252",
"length": 1258
},
"id": "CVE-2026-109282-dbd3ec8c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/a17cfd15af1038e3ef179016b41ad88e936b4487",
"target": {
"file": "coders/json.c",
"function": "WriteJSONImage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"220209601524284817733237669319216529613",
"136077306706686417340363764193376173848",
"137065104695717040329869957578434817750",
"73697579917221354849370945423922218942",
"135526127711215401346985698327140525134",
"181933025999243633680921323891549637432",
"81329915005657140970638741898452258606",
"117708375935125778864529804565883855241",
"73749452011460629099576947444130142969",
"273001199639458473598501854690016767840"
],
"threshold": 0.9
},
"id": "CVE-2026-109282-ffc84acb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/af7b85012e62fa65393277790b96c56a98d882b6",
"target": {
"file": "coders/yaml.c"
}
}
]
"2026-10-28T11:06:25Z"