PT-2026-57443 · Unknown · Imagemagick

·

CVE-2026-61465

·

Published

2026-07-11

·

Updated

2026-09-08

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51
Description ImageMagick fails to verify the allowed memory allocation limit during matrix-backed operations, such as the -canny operation. A remote attacker can provide a specially crafted image that forces the application to allocate memory exceeding the limits defined in the configured policy, leading to a denial of service.
Recommendations Update to version 7.1.2-26 or later. Update to version 6.9.13-51 or later.

Exploit

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-61465
ECHO-2A91-C700-7F3F
GHSA-RVHP-75F6-9JQH
JLSEC-2026-1062
OESA-2026-3057
OESA-2026-3058
OESA-2026-3059
OESA-2026-3060
OESA-2026-3061
OPENSUSE-SU-2026:11273-1
OPENSUSE-SU-2026:21391-1
SUSE-SU-2026:22829-1
SUSE-SU-2026:3193-1
SUSE-SU-2026:3194-1
SUSE-SU-2026:3219-1
USN-8739-1

Affected Products

Imagemagick