Low severity2.9NVD Advisory· Published Jul 15, 2026· Updated Jul 15, 2026
CVE-2026-61862
CVE-2026-61862
Description
ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed (read past the profile boundary). This behavior occurs when debug output is enabled.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 7.1.2.0-160000.13.1+ 1 more
- (no CPE)range: < 7.1.2.0-160000.13.1
- (no CPE)range: < 7.1.2.27-3.1
- Range: <7.1.2-26 and <6.9.13-51
- Range: <7.1.2-26 and <6.9.13-51
Patches
Vulnerability mechanics
References
2News mentions
1- ImageMagick: 14 Vulnerabilities Including Memory Leaks and DoS Flaws Disclosed TogetherVypr Intelligence · Jul 16, 2026