CVE-2026-109271 — ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder
ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers ca…
Published: 2026-10-12 · CVSS: 6.3 · CVSS 4.0
ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7