CVE Catalog
CVE-2026-61869
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, potentially leading to denial of service (DoS).
Risk Assessment
The risk is potential memory exhaustion on the server or application processing images, which could cause service unavailability for users.
Recommendation
It is recommended to immediately upgrade ImageMagick to version 7.1.2-26 or later (for branch 7) and 6.9.13-51 or later (for branch 6).
Original NVD description (English source)
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can lead to denial of service.