PT-2026-60157 · Imagemagick · Imagemagick

Published 2026-07-15 · Updated 2026-07-15 · CVE-2026-61867

NVD

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-61867

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-61867 · Security Note
• https://vulncheck.com/advisories/imagemagick-before-26-memory-leak-in-tiff-encoder-2 · Note