CVE Catalog
CVE-2026-66011
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
ImageMagick before 7.1.2-27 has a memory leak vulnerability in the magick CLI when invalid options are provided. Attackers can repeatedly supply malformed arguments to cause memory exhaustion.
Risk Assessment
Risk of system memory exhaustion and potential denial of service (DoS) by intentionally providing invalid arguments.
Recommendation
Update ImageMagick to version 7.1.2-27 or later. Restrict CLI access for untrusted users.
Original NVD description (English source)
ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.