CVE-2026-61864 PUBLISHED

ImageMagick before 7.1.2-26 Memory Leak in Log Colorspace

Assigner: VulnCheck
Reserved: 10.07.2026 Published: 15.07.2026 Updated: 15.07.2026

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS Score: 2.1

Product Status

Vendor ImageMagick
Product ImageMagick
Versions Default: unaffected
  • affected from 0 to 7.1.2-26 (excl.)
  • Version 7.1.2-26 is unaffected
Vendor ImageMagick
Product ImageMagick
Versions Default: unaffected
  • affected from 0 to 6.9.13-51 (excl.)
  • Version 6.9.13-51 is unaffected

Credits

  • Bin-infinite reporter

References

Problem Types

  • Missing Release of Memory after Effective Lifetime CWE