Low severity2.9NVD Advisory· Published Jul 11, 2026· Updated Jul 13, 2026
CVE-2026-61870
CVE-2026-61870
Description
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.
Affected products
6cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: <6.9.13-51
- (no CPE)range: <7.1.2-26
- osv-coords4 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweed
< 7.1.2.0-160000.12.1+ 3 more
- (no CPE)range: < 7.1.2.0-160000.12.1
- (no CPE)range: < 1.3.45-160000.10.1
- (no CPE)range: < 7.1.2.27-2.1
- (no CPE)range: < 1.3.47-5.1
Patches
Vulnerability mechanics
References
2News mentions
1- ImageMagick: Ten Vulnerabilities Disclosed Together, Affecting Memory Handling and File WritingVypr Intelligence · Jul 11, 2026