Medium severity5.3NVD Advisory· Published Oct 12, 2026
CVE-2026-109262
CVE-2026-109262
Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.
Affected products
1- Range: <6.9.13-57
Patches
Vulnerability mechanics
References
4- github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3nvd
- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvpnvd
- github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64b61f1154a1dfnvd
- www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-svg-encodernvd
News mentions
0No linked articles in our index yet.