Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD6.3 Medium

CVE-2026-61871

ImageMagick before 7.1.2-26 Memory Leak in ICON decoder

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-26affected
  • 7.1.2-26unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-51affected
  • 6.9.13-51unaffected

References