CVE-2026-61864

LowCVSS 2.9

Published: 15/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace. When the operation fails, a small amount of memory is not released.

Risk Assessment

Repeatedly triggering failed color transformations can gradually exhaust memory, potentially causing service crashes or degraded system performance.

Recommendation

Immediately upgrade ImageMagick to version 7.1.2-26 or later (for the 7.x branch) and 6.9.13-51 or later (for the 6.x branch).

Original NVD description (English source)

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released.