Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-61866

ImageMagick before 7.1.2-26 Memory Leak in JNG encoder

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 7.1.2-26affected
  • 7.1.2-26unaffected

References