CVE-2026-106570

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is fixed in version 7.1.2-32.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-400"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106570.json"
}

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

Fixed

ad98b244c995d2e3051757fa3b7855f45b550d24

Fixed

cafc7372c8113a9636766f0eddde7b90373c9b44

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "7.1.2-32"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "cafc7372c8113a9636766f0eddde7b90373c9b44"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "7.1.2-32",
            "range": [
                {
                    "fixed": "ad98b244c995d2e3051757fa3b7855f45b550d24"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

7.*

7.0.1-0

7.0.1-1

7.0.1-10

7.0.1-2

7.0.1-3

7.0.1-4

7.0.1-5

7.0.1-6

7.0.1-7

7.0.1-8

7.0.1-9

7.0.10-0

7.0.10-1

7.0.10-10

7.0.10-11

7.0.10-12

7.0.10-13

7.0.10-14

7.0.10-15

7.0.10-16

7.0.10-17

7.0.10-18

7.0.10-19

7.0.10-2

7.0.10-20

7.0.10-21

7.0.10-22

7.0.10-23

7.0.10-24

7.0.10-25

7.0.10-26

7.0.10-27

7.0.10-28

7.0.10-29

7.0.10-3

7.0.10-30

7.0.10-31

7.0.10-32

7.0.10-33

7.0.10-34

7.0.10-35

7.0.10-36

7.0.10-37

7.0.10-38

7.0.10-39

7.0.10-4

7.0.10-40

7.0.10-41

7.0.10-42

7.0.10-43

7.0.10-44

7.0.10-45

7.0.10-46

7.0.10-47

7.0.10-48

7.0.10-49

7.0.10-5

7.0.10-50

7.0.10-51

7.0.10-52

7.0.10-53

7.0.10-54

7.0.10-55

7.0.10-56

7.0.10-57

7.0.10-58

7.0.10-59

7.0.10-6

7.0.10-60

7.0.10-61

7.0.10-62

7.0.10-7

7.0.10-8

7.0.10-9

7.0.11-0

7.0.11-1

7.0.11-10

7.0.11-11

7.0.11-12

7.0.11-13

7.0.11-14

7.0.11-2

7.0.11-3

7.0.11-4

7.0.11-5

7.0.11-6

7.0.11-7

7.0.11-8

7.0.11-9

7.0.2-0

7.0.2-1

7.0.2-10

7.0.2-2

7.0.2-3

7.0.2-4

7.0.2-5

7.0.2-6

7.0.2-7

7.0.2-8

7.0.2-9

7.0.3-0

7.0.3-1

7.0.3-10

7.0.3-2

7.0.3-3

7.0.3-4

7.0.3-5

7.0.3-6

7.0.3-7

7.0.3-8

7.0.3-9

7.0.4-0

7.0.4-1

7.0.4-10

7.0.4-2

7.0.4-3

7.0.4-4

7.0.4-5

7.0.4-6

7.0.4-7

7.0.4-8

7.0.4-9

7.0.5-0

7.0.5-1

7.0.5-10

7.0.5-2

7.0.5-3

7.0.5-4

7.0.5-5

7.0.5-6

7.0.5-7

7.0.5-8

7.0.5-9

7.0.6-0

7.0.6-1

7.0.6-2

7.0.6-3

7.0.6-4

7.0.6-5

7.0.6-6

7.0.6-7

7.0.6-8

7.0.6-9

7.0.7-0

7.0.7-1

7.0.7-10

7.0.7-11

7.0.7-12

7.0.7-13

7.0.7-14

7.0.7-15

7.0.7-16

7.0.7-17

7.0.7-18

7.0.7-19

7.0.7-2

7.0.7-20

7.0.7-21

7.0.7-22

7.0.7-23

7.0.7-24

7.0.7-25

7.0.7-26

7.0.7-27

7.0.7-28

7.0.7-29

7.0.7-3

7.0.7-30

7.0.7-31

7.0.7-32

7.0.7-33

7.0.7-34

7.0.7-35

7.0.7-36

7.0.7-37

7.0.7-38

7.0.7-39

7.0.7-4

7.0.7-5

7.0.7-6

7.0.7-8

7.0.7-9

7.0.7.7

7.0.8-0

7.0.8-1

7.0.8-10

7.0.8-11

7.0.8-12

7.0.8-13

7.0.8-14

7.0.8-15

7.0.8-16

7.0.8-17

7.0.8-18

7.0.8-19

7.0.8-2

7.0.8-20

7.0.8-21

7.0.8-22

7.0.8-23

7.0.8-24

7.0.8-25

7.0.8-26

7.0.8-27

7.0.8-28

7.0.8-29

7.0.8-3

7.0.8-30

7.0.8-31

7.0.8-32

7.0.8-33

7.0.8-34

7.0.8-35

7.0.8-36

7.0.8-37

7.0.8-38

7.0.8-39

7.0.8-4

7.0.8-40

7.0.8-41

7.0.8-42

7.0.8-43

7.0.8-44

7.0.8-45

7.0.8-46

7.0.8-47

7.0.8-48

7.0.8-49

7.0.8-5

7.0.8-50

7.0.8-51

7.0.8-52

7.0.8-53

7.0.8-54

7.0.8-55

7.0.8-56

7.0.8-57

7.0.8-58

7.0.8-59

7.0.8-6

7.0.8-60

7.0.8-61

7.0.8-62

7.0.8-63

7.0.8-64

7.0.8-65

7.0.8-66

7.0.8-67

7.0.8-68

7.0.8-7

7.0.8-8

7.0.8-9

7.0.9-0

7.0.9-1

7.0.9-10

7.0.9-11

7.0.9-12

7.0.9-13

7.0.9-14

7.0.9-15

7.0.9-16

7.0.9-17

7.0.9-18

7.0.9-19

7.0.9-2

7.0.9-20

7.0.9-21

7.0.9-22

7.0.9-23

7.0.9-24

7.0.9-25

7.0.9-26

7.0.9-27

7.0.9-4

7.0.9-5

7.0.9-6

7.0.9-7

7.0.9-8

7.0.9-9

7.1.0-0

7.1.0-1

7.1.0-10

7.1.0-11

7.1.0-12

7.1.0-13

7.1.0-14

7.1.0-15

7.1.0-16

7.1.0-17

7.1.0-18

7.1.0-19

7.1.0-2

7.1.0-20

7.1.0-21

7.1.0-22

7.1.0-23

7.1.0-24

7.1.0-25

7.1.0-26

7.1.0-27

7.1.0-28

7.1.0-29

7.1.0-3

7.1.0-30

7.1.0-31

7.1.0-32

7.1.0-33

7.1.0-34

7.1.0-35

7.1.0-36

7.1.0-37

7.1.0-38

7.1.0-39

7.1.0-4

7.1.0-40

7.1.0-41

7.1.0-42

7.1.0-43

7.1.0-44

7.1.0-45

7.1.0-46

7.1.0-47

7.1.0-48

7.1.0-49

7.1.0-5

7.1.0-50

7.1.0-51

7.1.0-52

7.1.0-53

7.1.0-54

7.1.0-55

7.1.0-56

7.1.0-57

7.1.0-58

7.1.0-59

7.1.0-6

7.1.0-60

7.1.0-61

7.1.0-62

7.1.0-7

7.1.0-8

7.1.0-9

7.1.1-0

7.1.1-1

7.1.1-10

7.1.1-11

7.1.1-12

7.1.1-13

7.1.1-14

7.1.1-15

7.1.1-16

7.1.1-17

7.1.1-18

7.1.1-19

7.1.1-2

7.1.1-20

7.1.1-21

7.1.1-22

7.1.1-23

7.1.1-24

7.1.1-25

7.1.1-26

7.1.1-27

7.1.1-28

7.1.1-29

7.1.1-3

7.1.1-30

7.1.1-31

7.1.1-32

7.1.1-33

7.1.1-34

7.1.1-35

7.1.1-36

7.1.1-37

7.1.1-38

7.1.1-39

7.1.1-4

7.1.1-40

7.1.1-41

7.1.1-43

7.1.1-44

7.1.1-45

7.1.1-46

7.1.1-47

7.1.1-5

7.1.1-6

7.1.1-7

7.1.1-8

7.1.1-9

7.1.2-0

7.1.2-1

7.1.2-10

7.1.2-11

7.1.2-12

7.1.2-13

7.1.2-14

7.1.2-15

7.1.2-16

7.1.2-17

7.1.2-18

7.1.2-19

7.1.2-2

7.1.2-20

7.1.2-21

7.1.2-22

7.1.2-23

7.1.2-24

7.1.2-25

7.1.2-26

7.1.2-27

7.1.2-28

7.1.2-29

7.1.2-3

7.1.2-30

7.1.2-31

7.1.2-5

7.1.2-6

7.1.2-7

7.1.2-8

7.1.2-9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-106570.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "60082390670771524058358382067589640159",
            "length": 1207
        },
        "id": "CVE-2026-106570-0bbbb6dc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44",
        "target": {
            "file": "MagickCore/distribute-cache.c",
            "function": "GetHostname"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "323750591848967390970345304574825193870",
            "length": 2278
        },
        "id": "CVE-2026-106570-1802c4a1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44",
        "target": {
            "file": "MagickCore/distribute-cache.c",
            "function": "DistributePixelCacheClient"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "182637810633048263356352226192681794205",
            "length": 470
        },
        "id": "CVE-2026-106570-44b6dec4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44",
        "target": {
            "file": "MagickCore/distribute-cache.c",
            "function": "DeriveSIPKeyFromSecret"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "49163106458503797568161990173646868917",
            "length": 3245
        },
        "id": "CVE-2026-106570-89f42d23",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44",
        "target": {
            "file": "MagickCore/distribute-cache.c",
            "function": "DistributePixelCacheServer"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "201009263072797618828212587824959363184",
                "335195602347749481466013485311782542956",
                "93017926252530774616482992003689291216",
                "18441251746758717011258313698085482324",
                "241142612229993125529481422750807723133",
                "282717150210710375566777140490672638014",
                "338852113520948808418112534860007976169",
                "106196453653543836134767153370763341272",
                "43210431289548409480835069210294905169",
                "5320041752337810902684561287139140784",
                "268845865824810986879179031892692631175",
                "32600506092783353865003515153831027940",
                "72957288956385724447113863546369902271",
                "27197492726353380073236191538491741686",
                "225608783690603079557197068444936440158",
                "118678911406440861589100831905895370481",
                "177414279268504349825124201645671006643",
                "145528364096543607977065989555803842148",
                "146687722045908347193803883763578251978",
                "232829901590623796483216333037167914300",
                "14571016279032343568107992233732730190",
                "257698189474621607552459104036855181138",
                "164505934819739959767992268416831933190",
                "36486964782594259114736852694180621931",
                "55549164412564080051858401017392700032",
                "183382606095762532770822827643061775713",
                "8041803521177937863706753882397366347",
                "118980789680128923491027533186338621425",
                "163522003294995200855974270964793617404",
                "299962055459861590271056714683335119175",
                "125535468627440655472175382554900512111",
                "287540341074907596822012294699108652516",
                "73702702399968037808801038504057728462",
                "222989109198635334917020722725404871842",
                "100768051362400898722719167935934631085",
                "200219656037577478763002755343991531200",
                "314395645624776339122832553373062992183",
                "102476194881472688411687910567595494002",
                "122855207371077996440510060095549589587",
                "119970275570471118231683138014799104253",
                "53101797800738191115965873231183455052",
                "153699227661050310091710514381687569638",
                "41112996786946370701493936039381116945",
                "99711398993206665083527993777169897812",
                "287408470125039009737588671752279301789",
                "225047722910908215990989143983780500604",
                "73030002438095306717297347358221509193",
                "99711398993206665083527993777169897812",
                "287408470125039009737588671752279301789",
                "225047722910908215990989143983780500604",
                "73030002438095306717297347358221509193",
                "99711398993206665083527993777169897812",
                "287408470125039009737588671752279301789",
                "225047722910908215990989143983780500604",
                "234337785698784269153458048496072645789",
                "65624700785013738597937230447657195831",
                "100596939940141035542200125651958502757",
                "68793516698884854942773243168252980418",
                "41897541664758022055401521254520623377",
                "99711398993206665083527993777169897812",
                "287408470125039009737588671752279301789",
                "225047722910908215990989143983780500604",
                "234337785698784269153458048496072645789",
                "49418691670720120507811227574511061065",
                "268849787749053949719637006832295933291",
                "51306929673541244702635620145700982998",
                "148978696269213100439229045084555870254",
                "332981222950694430838079160824032726358",
                "88664942665155568941257025291100741551",
                "312021742701054925290647577656082052802",
                "208953925497036048163291716932948421758",
                "251231439372153446647502553807325986940",
                "311627710960610862130398472149319969885",
                "239580348729033240589020316943617342698",
                "265042935317562649494933267111532475651",
                "264719736410826568544753570130203143669",
                "268140387087314309532468105849807998521",
                "164367049154607553816125115778221132286",
                "214796345832261184453543352962211512438",
                "8244785153180953712902990936367092699",
                "267511460372509079613139659161769839025",
                "263459197700248013407629784838146954423",
                "117816409409758329289845158235732501046",
                "61802051701013151421770265267487413455",
                "122251047802268796135594212682832355814",
                "12849037128799561983134245130576015840",
                "259034393725024210983761952076168017243",
                "45907504160259916132784292107987075285",
                "89855594806771058474427779658099454704",
                "318149544823430452777840916341971457735",
                "311530835757942962931812560706294628874",
                "111191856582201230818420893900876809458",
                "236050653752830632900454339236011806477",
                "215796634875255847806535712637937838403",
                "229222246599118221405758242966799515104",
                "123723245940497680295820181826719472280",
                "30593009434890457263783915360444291328",
                "758268843432922648733811105806343679",
                "16318973421162917875580086185071085847",
                "161932152411572644471469461746882729801",
                "281764369456927898232063727895574063930",
                "7868677361657839133521995413767296144",
                "156897891044028632935568597618489387192",
                "258562268694148990866764048210303255357",
                "23319644392374265143047893677745744916",
                "46904956949710224665078132579056868887",
                "108572129102348784700822890453899442964",
                "319122281863967563710326277140264197789",
                "2073842868666169326059332526442877102",
                "69512726338188720462508790471647112633",
                "274669371806174071741355306080948128108",
                "99333040174463590276188152531011761892",
                "265949895469823849519689709090597649446",
                "136474934919407043376517346161874082588",
                "268909096592905787654253760235708692753",
                "114483458482494622360236038019192582295",
                "172074726573524595568461782856629702699",
                "299043832515110549041916722525795310456",
                "1545197384688750311333380477751013163",
                "101841744553408396803898915334415215390",
                "332509583897389894165835427068600546343",
                "137642881273052244117364252660474630621",
                "116545112105997554785276262342066397903",
                "238683881153590191263947446174244768576",
                "83772048140920043730417737469931730319",
                "54883135613130725337581886480492683401",
                "204963204052527319168285112005605222070",
                "102516198079857357304201138043129096865",
                "261021289154015439952145976032697046648",
                "175306176424004857000146765086001138643",
                "322634229775525769666838919695616135399",
                "101841744553408396803898915334415215390",
                "332509583897389894165835427068600546343",
                "137642881273052244117364252660474630621",
                "116545112105997554785276262342066397903"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-106570-ff267553",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/cafc7372c8113a9636766f0eddde7b90373c9b44",
        "target": {
            "file": "MagickCore/distribute-cache.c"
        }
    }
]

vanir_signatures_modified

"2026-10-16T07:22:22Z"