CVE-2026-109265 | ImageMagick up to 7.1.2-31 XMP Profiles heap-based overflow

October 12, 2026 Yanac

A vulnerability described as problematic has been identified in ImageMagick up to 7.1.2-31. Affected by this issue is some unknown functionality of the component XMP Profiles. Such manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-109265. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More