CVE-2026-106571
Received Received - Intake

Heap Buffer Overflow in ImageMagick

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: GitHub, Inc.

Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixed in versions 6.9.13-56 and 7.1.2-31.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-106571
EUVD
EUVD-2026-94390

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ImageMagick ImageMagick < 6.9.13-56
ImageMagick ImageMagick >= 7.0.0, < 7.1.2-31

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-106571 is a memory corruption vulnerability in ImageMagick, a software for image editing. It occurs when a crafted local call to the GetVirtualPixels API triggers an integer overflow, causing a heap buffer overwrite. This leads to memory corruption and crashes the server process. The issue was fixed in versions 6.9.13-56 and 7.1.2-31.

Detection Guidance

To detect this vulnerability, check the installed version of ImageMagick on your system. Run: convert --version or identify --version. If the version is below 6.9.13-56 or 7.1.2-31, the system is vulnerable. Additionally, monitor for crashes in ImageMagick processes or unusual memory usage patterns.

Impact Analysis

This vulnerability can cause denial-of-service conditions by crashing the ImageMagick process. It may also lead to memory corruption, potentially allowing attackers to execute arbitrary code or escalate privileges if exploited. The impact is limited to local access with high complexity and does not require user interaction.

Compliance Impact

This vulnerability primarily impacts system availability due to crashes caused by memory corruption. It does not directly affect data confidentiality or integrity, which are key concerns for GDPR and HIPAA. However, repeated crashes could disrupt services handling sensitive data, potentially leading to compliance issues if availability is compromised.

Mitigation Strategies

Immediately update ImageMagick to version 6.9.13-56 or 7.1.2-31 or later. If updating is not possible, restrict access to ImageMagick functions or disable them until patched. Monitor system logs for crashes or memory errors related to ImageMagick.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106571. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart