CVE-2026-109280

Published: Ott 12, 2026 Last Modified: Ott 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
LOW 2,0
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
LOW 2,5
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low

Description

AI Translation Available

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.

476

NULL Pointer Dereference

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality
Potential Impacts:
Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands Read Memory Modify Memory
Applicable Platforms
Languages: C, C++, Java, C#, Go
Likelihood of Exploit: Medium
View CWE Details
https://github.com/ImageMagick/ImageMagick/commit/fb743d607…
https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b9…
https://github.com/ImageMagick/ImageMagick/security/advisor…
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c…
https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-b…
https://www.vulncheck.com/advisories/imagemagick-7.1.0-20-before-7.1.2-32-use-a…