CVE-2026-109272: ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

Q: Which deployments are exposed to this issue?

Deployments using ImageMagick versions from 7.1.1-31 up to, but not including, 7.1.2-32 are affected when they process PostScript files. The vulnerable code is in the PostScript decoder.

Q: What must an attacker do to trigger the crash?

An attacker must be able to provide a crafted PostScript file to an application for ImageMagick to process. The crash is triggered when a policy limit is reached during PostScript decoding.

Q: Does exploitation require authentication or user interaction?

No authentication or user interaction is required according to the supplied CVSS vector. However, exploitation depends on the attacker being able to submit a crafted PostScript file for processing.

Q: What is the impact of successful exploitation?

Successful exploitation crashes the application processing the file, resulting in a denial of service. The provided data indicates no confidentiality or integrity impact.

Published Oct 12, 2026

Updated

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.

Affected Software

1 affected component

ImageMagick ImageMagick>=7.1.1-31<7.1.2-32

Event History

Oct 12, 2026

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Deployments using ImageMagick versions from 7.1.1-31 up to, but not including, 7.1.2-32 are affected when they process PostScript files. The vulnerable code is in the PostScript decoder.

What must an attacker do to trigger the crash?

An attacker must be able to provide a crafted PostScript file to an application for ImageMagick to process. The crash is triggered when a policy limit is reached during PostScript decoding.

Does exploitation require authentication or user interaction?

No authentication or user interaction is required according to the supplied CVSS vector. However, exploitation depends on the attacker being able to submit a crafted PostScript file for processing.

What is the impact of successful exploitation?

Successful exploitation crashes the application processing the file, resulting in a denial of service. The provided data indicates no confidentiality or integrity impact.

CVE-2026-109272: ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to trigger the crash?

Does exploitation require authentication or user interaction?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to trigger the crash?

Does exploitation require authentication or user interaction?

What is the impact of successful exploitation?