Low severity3.7NVD Advisory· Published Jul 15, 2026· Updated Jul 15, 2026
CVE-2026-61871
CVE-2026-61871
Description
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.
Affected products
4- Range: <7.1.2-26, <6.9.13-51
- Range: <7.1.2-26, <6.9.13-51
- osv-coords2 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 7.1.2.0-160000.13.1+ 1 more
- (no CPE)range: < 7.1.2.0-160000.13.1
- (no CPE)range: < 7.1.2.27-3.1
Patches
Vulnerability mechanics
References
2News mentions
1- ImageMagick: 14 Vulnerabilities Including Memory Leaks and DoS Flaws Disclosed TogetherVypr Intelligence · Jul 16, 2026