VYPR
← All advisories
Unrated severityOSV Advisory· Published Jul 27, 2026

Debian imagemagick: ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick c…

CVE-2026-66011

Description

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

Affected products

2
  • ImageMagick/ImagemagickOSV2 versions
    7.1.2-26, 7.1.2-25, 7.1.2-24, …+ 1 more
    • (no CPE)range: 7.1.2-26, 7.1.2-25, 7.1.2-24, …
    • (no CPE)range: <7.1.2-27

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.