Vulnerabilities

TI-2026-44274 CVE-2026-61870 · GHSA-fhrj-r6ww-vq67

ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder

LOW 10

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00191 Published 2026-07-11 Partial fix · 7.1.2-26, 6.9.13-51 CWE-401

TI-2026-44265 CVE-2026-61861 · GHSA-vg96-jmxw-665f

LOW 29

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00554 Published 2026-07-11 Partial fix · 7.1.2-26, 6.9.13-51 CWE-416

TI-2026-44262 CVE-2026-61858 · GHSA-26m2-2whw-vfv9

LOW 22

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-07-11 Partial fix · 7.1.2-26, 6.9.13-51 CWE-59

TI-2026-44261 CVE-2026-61857 · GHSA-84mh-5fq7-7fx5

LOW 28

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00266 Published 2026-07-11 Partial fix · 7.1.2-26, 6.9.13-51 CWE-252

TI-2026-44070 CVE-2026-61465 · GHSA-84wp-3vxv-vr3v

LOW 21

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00173 Published 2026-07-11 Partial fix · 7.1.2-26, 6.9.13-51 CWE-770