CVE Catalog

CVE-2026-61863

LowCVSS 2.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.19%

9th percentile - higher than 9% of all known CVEs

Summary

In ImageMagick before version 7.1.2-26 (and 6.x before 6.9.13-51) there is a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.

Risk Assessment

The risk for the organization is the gradual exhaustion of system memory when processing TIFF images, which can lead to performance degradation or service crashes.

Recommendation

It is recommended to immediately update ImageMagick to version 7.1.2-26 or later (for the 6.x series to 6.9.13-51 or later).

Original NVD description (English source)

ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS