Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 09 Oct 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-416 | |
| Metrics |
cvssV4_0
|
Fri, 09 Oct 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed memory and a crash. | This CVE ID has been rejected as a duplicate. |
| Title | ImageMagick before 7.1.2-30 Use-After-Free in RSVG Decoder Without Cairo | ImageMagick: ImageMagick: Denial of Service via crafted SVG file in RSVG decoder |
| CPEs | ||
| Metrics |
cvssV4_0
|
cvssV4_0
|
Fri, 09 Oct 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-825 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Thu, 08 Oct 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed memory and a crash. | |
| Title | ImageMagick before 7.1.2-30 Use-After-Free in RSVG Decoder Without Cairo | |
| First Time appeared |
Imagemagick
Imagemagick imagemagick |
|
| Weaknesses | CWE-416 | |
| CPEs | cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Imagemagick
Imagemagick imagemagick |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: REJECTED
Assigner: VulnCheck
Published:
Updated: 2026-10-09T13:03:12.241Z
Reserved: 2026-10-05T21:59:09.590Z
Link: CVE-2026-105824
No data.
Status : Rejected
Published: 2026-10-08T15:17:34.323
Modified: 2026-10-09T14:17:16.520
Link: CVE-2026-105824
OpenCVE Enrichment
No data.
-
CWE-825
Expired Pointer Dereference