VULNERABILITY INTELLIGENCE

CVE-2026-61870

CVSS score2.9 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-07-11
Last modified2026-10-29
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

Weakness classification

  • disclosure@vulncheck.com: CWE-401

Primary references