CVE-2026-107210

imagemagick: ImageMagick is free and open-source software used for editing and manipulating digital images

CVE-2026-107210 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-107210, released October 7, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.3
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0034
27th percentile

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions and consuming excessive disk space. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.

Where it's fixed

ProductFixed inFixReleased
Linux
ImageMagick · sles 15.6 7.1.0.9-150400.6.122.1 SUSE-SU-2026:4799-1 Nov 7, 2026
ImageMagick · sles 15.7 7.1.0.9-150400.6.122.1 SUSE-SU-2026:4799-1 Nov 7, 2026
imagemagick · Debian 12.15 (bookworm) 8:6.9.11.60+dfsg-1.6+deb12u14 DEBIAN-CVE-2026-107210 Oct 7, 2026
imagemagick · Debian 13.5 (trixie) 8:7.1.1.43+dfsg1-1+deb13u13 DEBIAN-CVE-2026-107210 Oct 7, 2026
imagemagick · Debian 14 8:7.1.2.31+dfsg1-1 DEBIAN-CVE-2026-107210 Oct 7, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.