CVE-2026-107210: ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions and consuming excessive disk space. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ImageMagickto a version that resolves this vulnerability.Fixed in 7.1.2-30 - Upgrade
Upgrade
ImageMagickto a version that resolves this vulnerability.Fixed in 6.9.13-55
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using ImageMagick versions earlier than 7.1.2-30 or 6.9.13-55 are affected when they process highly compressed MAT images. Systems that accept or process untrusted image files are the most relevant exposure scenario.
What does an attacker need to exploit this issue?
An attacker needs to provide a crafted, highly compressed MAT image for ImageMagick to read. The supplied severity vector indicates exploitation can be performed over the network without privileges or user interaction.
What is the impact if exploitation succeeds?
The MAT decoder can create temporary files that exceed the configured security-policy resource limit. This can consume excessive disk space and cause an availability impact.
What should be done if the system cannot be patched immediately?
Limit or prevent processing of untrusted MAT images until ImageMagick can be updated. The issue is fixed in ImageMagick 7.1.2-30 and 6.9.13-55.