VULNERABILITY INTELLIGENCE

CVE-2026-61871

CVSS score6.3 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2026-07-15

Last modified2026-10-29

Description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.