CVE-2026-61464
LowCVSS 1.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In ImageMagick before versions 7.1.2-26 and 6.9.13-51, a heap-based buffer over-write vulnerability exists when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.
Risk Assessment
An attacker can remotely cause application or system crashes, leading to disruption of image processing services and potential data loss.
Recommendation
Immediately update ImageMagick to version 7.1.2-26 or later (for branch 7) and 6.9.13-51 or later (for branch 6).
Original NVD description (English source)
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.