{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105826", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-10-05T21:59:09.590Z", "datePublished": "2026-10-08T14:10:28.951Z", "dateUpdated": "2026-10-09T13:03:12.692Z", "dateRejected": "2026-10-09T13:03:12.692Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected as a duplicate."}], "replacedBy": ["CVE-2026-107210"], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-09T13:03:12.692Z"}}}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-08T16:00:35.916Z"}, "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-105826", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-08T15:36:46.777798Z"}}}], "title": "CISA ADP Vulnrichment"}], "cna": {"title": "ImageMagick before 7.1.2-30 Security Policy Bypass via MAT Decoder", "credits": [{"lang": "en", "type": "reporter", "value": "gb1dev"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "ImageMagick", "product": "ImageMagick", "versions": [{"status": "affected", "version": "0", "lessThan": "7.1.2-30", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.2-30", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "ImageMagick", "product": "ImageMagick", "versions": [{"status": "affected", "version": "0", "lessThan": "6.9.13-55", "versionType": "semver"}, {"status": "unaffected", "version": "6.9.13-55", "versionType": "semver"}], "defaultStatus": "unaffected"}], "datePublic": "2026-09-21T00:00:00.000Z", "references": [{"url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc", "name": "GitHub Security Advisory (GHSA-3j4w-pvxj-fpjc)", "tags": ["vendor-advisory"]}, {"url": "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-security-policy-bypass-via-mat-decoder", "name": "VulnCheck Advisory: ImageMagick before 7.1.2-30 Security Policy Bypass via MAT Decoder", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a security policy bypass in the MAT decoder, which does not enforce configured temporary file size limits when reading highly compressed data. Attackers can supply a crafted MAT image whose decompressed data is written to temporary files larger than the policy allows, consuming disk resources."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-409", "description": "Improper Handling of Highly Compressed Data (Data Amplification)"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.2-30"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9.13-55"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-08T14:10:28.951Z"}}}, "cveMetadata": {"cveId": "CVE-2026-105826", "state": "PUBLISHED", "dateUpdated": "2026-10-08T17:52:35.982Z", "dateReserved": "2026-10-05T21:59:09.590Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-10-08T14:10:28.951Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected as a duplicate."}], "id": "CVE-2026-105826", "lastModified": "2026-10-09T14:17:17.067", "metrics": {}, "published": "2026-10-08T15:17:34.650", "references": [], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "ImageMagick: ImageMagick: Denial of Service via MAT decoder policy bypass", "id": "2547995", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547995"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-409", "details": ["A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service (DoS) by submitting a specially crafted MATLAB (MAT) image containing highly compressed data. The MAT decoder fails to enforce configured temporary file size limits during decompression, allowing oversized temporary files to be written to disk and exhausting system storage resources."], "name": "CVE-2026-105826", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "ImageMagick", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "ImageMagick", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2026-10-08T14:10:28Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-105826\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105826\nhttps://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc\nhttps://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-security-policy-bypass-via-mat-decoder"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.1.2-30)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "7.1.2-30"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ImageMagick", "source": "cna", "vendor": "ImageMagick"}, "product": "imagemagick", "vendor": "imagemagick"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.9.13-55)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "6.9.13-55"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ImageMagick", "source": "cna", "vendor": "ImageMagick"}, "product": "imagemagick", "vendor": "imagemagick"}], "created": "2026-10-08T16:15:14.552047+00:00", "updated": "2026-10-08T17:00:17.640338+00:00", "vendors": ["imagemagick", "imagemagick$PRODUCT$imagemagick"]}