ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in ']>' makes the parser consume the rest of the file, so no policy rules are applied and restricted operations become allowed.
{
"cna_assigner": "VulnCheck",
"cwe_ids": [
"CWE-693"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105083.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "7.0.0-0"
},
{
"fixed": "7.1.2-32"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "1926ccf119141c26274c120d1899dffae19b0c71"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "399d4bd3b081f44c7fef78153f65e8cdebed9f1a"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "6.9.13-57"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "402ebc5353e569234908962cbdf451531ff66a57"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "da6022b2efe6cce8a2fd8f9e51188a45a3b9d558"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-105083.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-0166c5f1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/configure.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-0b669a0d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/log.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-165db07b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/color.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "198860099743429388505041989897661467806",
"length": 4845
},
"id": "CVE-2026-105083-19df1771",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/delegate.c",
"function": "LoadDelegateCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-1b7e59c2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/delegate.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"264187149652702308689830147993099956039",
"96721105394136298766539954977185867627",
"52996029313784684011825165972424916363",
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"255529762625279528738650596031585106212",
"333046070111724202436991343835777445941",
"200235953840062947660819659194203127589",
"7449519423742742073300995614990636628",
"190184972621953333053690543298387490101",
"222675817070511455611392833538039374462",
"256753618601157060667184125884483733064",
"38195931189810259287929341120323314584",
"326245866221900206588225860422832132280",
"12668404186106325291517716796070549673",
"229280687428966933136609285151184111441",
"233268997406745787799971006089064225041",
"176594736360100601072961202352154906497",
"96481781771424426696005889957274291998",
"233089982341299682241254119059771713083",
"7563367110118902666448407976526087951",
"231733109182717683378888279020342749862",
"281388189257279011973611355539175012586",
"123602949451678992249987852281563418772",
"78670163806783723211955837960749738285",
"63051540126799634406594904339607992752",
"48353420661813275570885832750219456365"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-261dc5ed",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/da6022b2efe6cce8a2fd8f9e51188a45a3b9d558",
"target": {
"file": "magick/policy.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "133335409910974310313669372565501619504",
"length": 5200
},
"id": "CVE-2026-105083-28915d9b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/type.c",
"function": "LoadTypeCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "295318611820901920644388595923873611878",
"length": 3308
},
"id": "CVE-2026-105083-376b50d4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/configure.c",
"function": "LoadConfigureCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "303496894128223987684672842089933053890",
"length": 3747
},
"id": "CVE-2026-105083-423170b6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/color.c",
"function": "LoadColorCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97669204744850462767808528861107131504",
"length": 3886
},
"id": "CVE-2026-105083-4781ff3c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/1926ccf119141c26274c120d1899dffae19b0c71",
"target": {
"file": "MagickCore/policy.c",
"function": "LoadPolicyCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-49b51974",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/configure.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "202462524351258648441118056342746283446",
"length": 4042
},
"id": "CVE-2026-105083-4fe213d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/policy.c",
"function": "LoadPolicyCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-52824665",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/policy.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"169466920715854605629564867859426910645",
"23834377735657214276965632918072467646",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-55daf5f8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/locale.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "61382911002882487905334686541507773103",
"length": 5221
},
"id": "CVE-2026-105083-5f7100b2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/type.c",
"function": "LoadTypeCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "306968659241924862115423977726809045992",
"length": 4910
},
"id": "CVE-2026-105083-64630fd6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/delegate.c",
"function": "LoadDelegateCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-66c88909",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/delegate.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "335845810979082599155260202847069827638",
"length": 5209
},
"id": "CVE-2026-105083-6eabd9ea",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/locale.c",
"function": "LoadLocaleCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "233280536501427344815969018566663263350",
"length": 1026
},
"id": "CVE-2026-105083-70bbd2be",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/1926ccf119141c26274c120d1899dffae19b0c71",
"target": {
"file": "MagickCore/policy.c",
"function": "SetMagickSecurityPolicy"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-711a58f1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/opencl.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"106598796168778452386221158502731451265",
"63303823275915014674738048725022425",
"83407588498657772873190193982036927114",
"42982765041629375546972317329896258670",
"161496572660168255716314002544490089700",
"62846788063886998842131624215584221891",
"138512078551798597189511946550879904706",
"2244836301594869929072722424586129383",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-7aefd10b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/locale.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128626800152832866319713525889141553036",
"length": 4192
},
"id": "CVE-2026-105083-7d2cdda9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/log.c",
"function": "LoadLogCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-96535a84",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/type.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-99fcf451",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/color.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "61092787588975201303356371884574499708",
"length": 3381
},
"id": "CVE-2026-105083-9f8b94fa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/configure.c",
"function": "LoadConfigureCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-a41df8b1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/type.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "310017904789238490052213244260269788844",
"length": 5143
},
"id": "CVE-2026-105083-cf4519f3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/locale.c",
"function": "LoadLocaleCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-dfc78469",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/policy.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "202462524351258648441118056342746283446",
"length": 4042
},
"id": "CVE-2026-105083-e013e0ed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/da6022b2efe6cce8a2fd8f9e51188a45a3b9d558",
"target": {
"file": "magick/policy.c",
"function": "LoadPolicyCache"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"335916611264233948560102334607924758864",
"35679752440462126093295624252868928045",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"338789617339852977246888143440260179053"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-ea702f4a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/log.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "339768670166606080872958506209499128006",
"length": 2696
},
"id": "CVE-2026-105083-ec43d28b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/opencl.c",
"function": "LoadOpenCLDeviceBenchmark"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"246562893721569314421838774078481084087",
"182967571178462577881728812727858751605",
"250410824276306325036615880966522744566",
"75485858038292579937827202163473457410",
"308973602488990069462333223854343136511",
"151017671983116586548106847152724190403",
"162526280362089192094808700675190471038",
"209852961024262167196391044105631392642",
"137805145223829790035077019322422165006",
"168830073974830790068993679086540553724",
"333046070111724202436991343835777445941",
"200235953840062947660819659194203127589",
"7449519423742742073300995614990636628",
"190184972621953333053690543298387490101",
"222675817070511455611392833538039374462",
"256753618601157060667184125884483733064",
"38195931189810259287929341120323314584",
"326245866221900206588225860422832132280",
"12668404186106325291517716796070549673",
"229280687428966933136609285151184111441",
"233268997406745787799971006089064225041",
"176594736360100601072961202352154906497",
"96481781771424426696005889957274291998",
"233089982341299682241254119059771713083",
"7563367110118902666448407976526087951",
"231733109182717683378888279020342749862",
"281388189257279011973611355539175012586",
"123602949451678992249987852281563418772",
"95219828017948491964984837843373607901",
"253655749906910803762825878597456953311",
"273766591221645689506692372157121278442",
"92794470679178632184495562980486514229",
"328709494029861839553374205060295338268",
"308719743096622498765641659186553171600",
"283865118895117338328156785398117304249"
],
"threshold": 0.9
},
"id": "CVE-2026-105083-ee924eda",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/1926ccf119141c26274c120d1899dffae19b0c71",
"target": {
"file": "MagickCore/policy.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "172754305174352335634958965766230581977",
"length": 4220
},
"id": "CVE-2026-105083-f8ed07bd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/log.c",
"function": "LoadLogCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97669204744850462767808528861107131504",
"length": 3886
},
"id": "CVE-2026-105083-fce96fcf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick/commit/399d4bd3b081f44c7fef78153f65e8cdebed9f1a",
"target": {
"file": "MagickCore/policy.c",
"function": "LoadPolicyCache"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "242320753835214990643465684148885515022",
"length": 3804
},
"id": "CVE-2026-105083-fe56bec6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/imagemagick/imagemagick6/commit/402ebc5353e569234908962cbdf451531ff66a57",
"target": {
"file": "magick/color.c",
"function": "LoadColorCache"
}
}
]
"2026-10-16T10:06:43Z"