CVE-2026-105083

A policy bypass vulnerability exists in ImageMagick versions before 7.1.2-32 and 6.9.13-57 within the LoadPolicyCache component. A local attacker with permission to modify the security policy configuration file can bypass restrictions by providing an alternate XML document type declaration (DOCTY...

EUVD-2026-91870

ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in '' makes the parser consume the rest of the file, so no policy rules are applied a...