Is CVE-2026-106577 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-106577 being exploited in the wild.

How severe is CVE-2026-106577?

Medium severity, with a CVSS score of 5.3, published 7 October 2026.

Which products and versions are affected?

ImageMagick before 7.1.2-31 and 6.9.13-56.

Is there a fix for CVE-2026-106577?

Yes: fixed in 7.1.2-31, 6.9.13-56. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-106577 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-106577?

Check whether you run ImageMagick or ImageMagick at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-106577: ImageMagick code injection in PostScript coder

CVE-2026-106577 · Severity: medium · CVSS 5.3 · Published 2026-10-07

ImageMagick is widely used image processing software that converts and edits digital images. An attacker who supplies a specially crafted image file with unescaped values in labels can inject malicious PostScript code into the output, potentially leading to code execution or data manipulation when the file is processed.

Technologies: ImageMagick. Vendors: ImageMagick.

Quick answers

Is CVE-2026-106577 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-106577 being exploited in the wild.
How severe is CVE-2026-106577?: Medium severity, with a CVSS score of 5.3, published 7 October 2026.
Which products and versions are affected?: ImageMagick before 7.1.2-31 and 6.9.13-56.
Is there a fix for CVE-2026-106577?: Yes: fixed in 7.1.2-31, 6.9.13-56. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-106577 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-106577?: Check whether you run ImageMagick or ImageMagick at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 7.1.2-31, 6.9.13-56

Technical details

Unescaped or untrimmed label values passed to PostScript output coders (ps, ps2, ps3, pdf) allow code injection into generated PostScript streams. An attacker can craft an input image with malicious label content that gets interpreted as PostScript commands rather than data. This affects image processing workflows where ImageMagick converts to or processes PostScript formats.

Affected products

ImageMagick before 7.1.2-31 and 6.9.13-56

Timeline

2026-10-07: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.