CVE-2026-105827: ImageMagick before 7.1.2-30 Stack Overflow in CALS Decoder
ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled recursion vulnerability in the CALS decoder due to a missing depth check. Attackers can supply a crafted CALS image that triggers unbounded recursion, exhausting the stack and crashing the process, resulting in a denial of service.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using ImageMagick versions before 7.1.2-30 or 6.9.13-55 are affected when they process CALS images. Services that accept or automatically process attacker-supplied image files are the most directly exposed.
What does an attacker need to exploit it?
An attacker needs to provide a crafted CALS image to a vulnerable ImageMagick instance. The supplied vector indicates network exploitation is possible with no privileges or user interaction required.
What is the impact of successful exploitation?
The crafted image causes unbounded recursion in the CALS decoder, exhausting the process stack and crashing the process. The stated impact is denial of service; no confidentiality or integrity impact is indicated.
What should be done if an immediate upgrade is not possible?
Avoid processing CALS images with the affected ImageMagick deployment until it can be updated. Restricting untrusted image inputs can reduce exposure where CALS processing cannot otherwise be disabled.