Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-106570

Imagemagick: denial of service

Risk score
41/100
CVSS
6.5 v3.1
Exploit chance (30 days)
0.2%
Published
7 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is fixed in version 7.1.…
Affected
Imagemagick before 7.1.2
Fix
Upgrade Imagemagick to 7.1.2 or later.
Exploitation
No known exploitation

Story map

Story map: ImagemagickTHE FLAWSTHE FIXCVE-2026-106570Denial of serviceCVSS 6.5 · EPSS 0%CVE-2026-106580Access control flaw can lead todenial of serviceCVSS 8.2 · EPSS 0%CVE-2026-106573Denial of serviceCVSS 7.5 · EPSS 0%CVE-2026-106576Denial of serviceCVSS 7.5 · EPSS 0%Upgrade Imagemagick7.1.2or later on your release lineWho is exposedImagemagick before 7.1.2YELLOW · PLAN IT INImagemagickImageMagick is free andopen-source software used forediting and manipulating digitalimages. Prior to 7.1.2-31 and6.9.13-56, a missingsecurity-policy check in the CUTencoder allows a crafted local…Where it standsNo known exploitationCONNECTS TOSame weaknessDenial of service (CWE-400)250 other warnings in 30 days →Same productEarlier Imagemagick warnings18 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Imagemagick: Yellow, plan it in. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue is fixed in versions 7…

The flaws

The fix

Upgrade Imagemagick: 7.1.2 or later on your release line

Who is exposed: Imagemagick before 7.1.2

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 6.5 medium

References

Original description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is fixed in version 7.1.2-32.

Last activity 7 Oct 2026. Patch Forecast updates every hour.