CVE-2026-105825
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Oct 08, 2026
Vendor
unknown
Description
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that process them using ImageMagick.