Is CVE-2026-105398 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105398?

CVE-2026-105398 has a CVSS v3 severity of MEDIUM (5.1).

Back

CVE-2026-105398

Description

ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability that allows attackers to overwrite heap memory by making a crafted call to the GetVirtualPixels API. Attackers can trigger the out-of-bounds heap write through crafted input to crash the server, causing a denial of service.