Is CVE-2026-105404 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105404?

CVE-2026-105404 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-105404

Description

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by these coders.