Low severity3.7NVD Advisory· Published Oct 12, 2026
CVE-2026-109260
CVE-2026-109260
Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.
Affected products
1- Range: <6.9.13-57
Patches
Vulnerability mechanics
References
4- github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930nvd
- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3nvd
- github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090nvd
- www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-png-encodernvd
News mentions
0No linked articles in our index yet.