Low severity1.8NVD Advisory· Published Jul 15, 2026· Updated Jul 15, 2026
CVE-2026-61464
CVE-2026-61464
Description
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.
Affected products
6- Range: <7.1.2-26, <6.9.13-51
- Range: <7.1.2-26, <6.9.13-51
- osv-coords4 versionspkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 1.3.45-160000.11.1+ 3 more
- (no CPE)range: < 1.3.45-160000.11.1
- (no CPE)range: < 1.3.48-1.1
- (no CPE)range: < 7.1.2.0-160000.13.1
- (no CPE)range: < 7.1.2.27-3.1
Patches
Vulnerability mechanics
References
2News mentions
1- ImageMagick: 14 Vulnerabilities Including Memory Leaks and DoS Flaws Disclosed TogetherVypr Intelligence · Jul 16, 2026