CVE-2026-109258

LOW Status: Received

CVSS Scores

CVSS v3.x Base Score
2.5
LOW

Description

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.

Published
October 12, 2026 5:17 PM
Last Modified
October 12, 2026 5:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-476

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry