CVE-2026-61864 LOW

CVE-2026-61864: ImageMagick before 7.1.2-26 Memory Leak in Log Colorspace

Vendor Imagemagick

Product ImageMagick

Weakness CWE-401

Published July 15, 2026

Last update July 15, 2026

View on NVD All CVEs

CVSS base score

2.1/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released.

Key dates

02Disclosure timeline

July 15, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-61864 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/401.html AskarLabs — CWE-401 write-up Missing Release of Memory after Effective Lifetime

Identifiers

CVE CVE-2026-61864

CWE CWE-401

CVSS 2.1 / LOW

Affected versions

Vendor Imagemagick

Product ImageMagick

Affected < 7.1.2-26

Vendor Imagemagick

Product ImageMagick

Affected < 6.9.13-51