CVE-2026-105083
Fixed in a distro release EPSS <1%CVSS 3.9
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in ']>' makes the parser consume the rest of the file, so no policy rules are applied and restricted operations become allowed.
Products: imagemagick
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | imagemagick | no fix |
| Debian 13 | imagemagick | no fix |
| Debian 14 | imagemagick | no fix |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | ImageMagick | 7.1.1.43-150700.3.84.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | ImageMagick | 7.1.1.43-150700.3.84.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | ImageMagick | 7.1.0.9-150400.6.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | ImageMagick | 7.1.0.9-150400.6.122.1 |
| Ubuntu 26.10 | imagemagick | no fix |
| Ubuntu Pro 14.04 LTS | imagemagick | no fix |
| Ubuntu Pro 16.04 LTS | imagemagick | no fix |
| Ubuntu Pro 18.04 LTS | imagemagick | no fix |
| Ubuntu Pro 20.04 LTS | imagemagick | no fix |
| Ubuntu Pro 22.04 LTS | imagemagick | no fix |
| Ubuntu Pro 24.04 LTS | imagemagick | no fix |
| Ubuntu Pro 26.04 LTS | imagemagick | no fix |
| openSUSE Tumbleweed | ImageMagick | 7.1.2.32-1.1 |