Is CVE-2026-105402 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105402?

CVE-2026-105402 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-105402

Description

ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image processing.