CVE-2026-61872 LOW

CVE-2026-61872: ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder

Vendor Imagemagick
Product ImageMagick
Weakness CWE-401
Published July 15, 2026
Last update July 15, 2026
View on NVD All CVEs

CVSS base score

2.0/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.

Key dates

02Disclosure timeline

July 15, 2026 CVE published
July 15, 2026 Record updated