Is CVE-2026-106564 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106564?

CVE-2026-106564 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-106564

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32.