CVE-2026-61867CWE-401

ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder

Low · published July 15, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00139 · 3.0th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-07-15T11:25Z
EPSS history
Timeline
  • 15 JUL 11:25Z
    ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder
    cvelistv5