Unknown · Imagemagick · CVE-2026-22770
**Name of the Vulnerable Software and Affected Versions**
ImageMagick versions prior to 7.1.2-13
**Description**
ImageMagick is software used for editing and manipulating digital images. A flaw exists in the `BilateralBlurImage` method where double buffers allocated inside `AcquireBilateralTLS` are not fully initialized. This can lead to the release of an invalid pointer within the `DestroyBilateralTLS` function when memory allocation fails.
**Recommendations**
Update ImageMagick to version 7.1.2-13 or later.