CVE-2026-61867

2.1 lowEPSS 0.1%

Low (2.1). EPSS 0.1% chance of exploitation in the next 30 days.

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

2.9 low

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-401
Published: 2026-07-15
Modified: 2026-07-15
Record from: the NVD, synced 2026-10-19

References

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63
https://www.vulncheck.com/advisories/imagemagick-before-26-memory-leak-in-tiff-encoder-2

Check your stack JSON