Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.3%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-102635


Contact Us

Shodan ® - All rights reserved