CVE-2026-109278

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32

Description A memory leak exists in the wavelet-denoise operation, which occurs when the software fails to release allocated memory after failing to acquire a required resource. This can be exploited by repeatedly triggering the wavelet-denoise process under resource-constrained conditions to exhaust memory and degrade service availability.

Recommendations Update to version 6.9.13-57 or later. Update to version 7.1.2-32 or later.