PT-2026-110678 · Unknown · Imagemagick

·

CVE-2026-109261

·

Published

2026-10-12

·

Updated

2026-10-12

CVSS v4.0

6.3

Medium

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32
Description A memory leak exists in the GIF encoder. This occurs because allocated memory is not released when color quantization—the process of reducing the number of distinct colors in an image—fails during encoding. An attacker can provide images that trigger a quantization failure during GIF conversion, causing memory to leak with each attempt and degrading system availability.
Recommendations Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.

Exploit

Fix

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-109261
GHSA-W68R-6FMR-CVG4

Affected Products

Imagemagick