PT-2026-57447 · Imagemagick · Imagemagick

Published 2026-07-11 · Updated 2026-07-11 · CVE-2026-61870

Mitre

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-61870

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-61870 · Security Note
• https://vulncheck.com/advisories/imagemagick-before-26-memory-leak-via-viff-encoder · Note