{"id":"CVE-2026-109272","summary":"ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder","details":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","aliases":["GHSA-58h4-rwr6-wj72"],"modified":"2026-10-13T02:45:41.533644021Z","published":"2026-10-12T16:04:38.988Z","database_specific":{"cwe_ids":["CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109272.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109272.json"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/d98509b23a547d9ccd0a8af8650d03c5c01c3722"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109272"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/imagemagick-7.1.1-31-before-7.1.2-32-null-pointer-dereference-in-postscript-decoder"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"2f6d2de838390a054af74822e80d74b7799633cb"},{"fixed":"ad98b244c995d2e3051757fa3b7855f45b550d24"}],"database_specific":{"extracted_events":[{"introduced":"7.1.1-31"},{"fixed":"7.1.2-32"}],"source":"AFFECTED_FIELD"}}],"versions":["7.1.2-31","7.1.2-30","7.1.2-29","7.1.2-28","7.1.2-27","7.1.2-26","7.1.2-25","7.1.2-24","7.1.2-23","7.1.2-22","7.1.2-21","7.1.2-20","7.1.2-19","7.1.2-18","7.1.2-17","7.1.2-16","7.1.2-15","7.1.2-14","7.1.2-13","7.1.2-12","7.1.2-11","7.1.2-10","7.1.2-9","7.1.2-8","7.1.2-7","7.1.2-6","7.1.2-5","7.1.2-3","7.1.2-2","7.1.2-1","7.1.2-0","7.1.1-47","7.1.1-46","7.1.1-45","7.1.1-44","7.1.1-43","7.1.1-41","7.1.1-40","7.1.1-39","7.1.1-38","7.1.1-37","7.1.1-36","7.1.1-35","7.1.1-34","7.1.1-33","7.1.1-32","7.1.1-31"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109272.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}]}