CVE-2026-105404
Received Received - Intake

PostScript Code Injection in ImageMagick

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: VulnCheck

Description
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by these coders.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-105404
EUVD
EUVD-2026-95008

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ImageMagick ImageMagick 0
ImageMagick ImageMagick 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a code injection flaw in ImageMagick versions before 7.1.2-31 and 6.9.13-56. It occurs in the PostScript coders where certain values are not properly escaped or trimmed when written to output. Attackers can exploit this by providing crafted inputs that embed arbitrary PostScript code into generated files.

Detection Guidance

Check ImageMagick version with 'convert --version' or 'magick --version'. If using versions before 7.1.2-31 or 6.9.13-56, the system is vulnerable. Monitor for suspicious PostScript files or unexpected code execution during image processing.

Impact Analysis

An attacker could exploit this to inject malicious PostScript code into files processed by ImageMagick. This could lead to unauthorized code execution when those files are opened or processed, potentially compromising the system or data.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized code execution through crafted PostScript files. If exploited, it may lead to data breaches or unauthorized access to sensitive information, violating confidentiality requirements in these regulations.

Mitigation Strategies

Upgrade ImageMagick to patched versions 7.1.2-31 or later and 6.9.13-56 or later. Disable PostScript coder usage if not required. Review and restrict user permissions for image processing tools.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105404. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart