CVE-2026-109272
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Oct 12, 2026
Vendor
unknown
Description
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.