CVE-2026-105403

A flaw was found in ImageMagick. An attacker can bypass security policy restrictions by providing a crafted image when policies are configured using the coder domain rather than the module domain. Successful exploitation causes the application to process image formats that administrators intended to block, potentially resulting in unauthorized information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.