CVE-2026-105401
mediumrejectedpriority · track · 21EPSS 0.002 · 8 %ileDEUSEPSS · scored 2026-10-09
Rejected reason: This CVE ID has been rejected as a duplicate.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3486ImageMagick: Mehrere SchwachstellenDeutsch2026-09-21csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.
- CVE-2026-106574ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash2026-10-07vendor · osvUS
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server. This issue is fixed in version 7.1.2-31.
also known as (1)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references
External citations — patches, advisories, analysis.
No references recorded.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan