Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 30.5%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-109260


Contact Us

Shodan ® - All rights reserved