Low severity3.7NVD Advisory· Published Oct 12, 2026
CVE-2026-109261
CVE-2026-109261
Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.
Affected products
1- Range: <6.9.13-57
Patches
Vulnerability mechanics
References
4- github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221nvd
- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4nvd
- github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31bnvd
- www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-gif-encodernvd
News mentions
0No linked articles in our index yet.