Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-66011

ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options

Description

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 7.1.2-27affected
  • 7.1.2-27unaffected

References