CVE-2026-61857

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26

Description A heap use-after-free issue exists due to a missing null check during the parsing of XMP profiles. An attacker can use specially crafted image files containing malicious XMP data to trigger this condition, leading to application crashes. Heap use-after-free occurs when a program continues to use a pointer after the memory it points to has been freed.

Recommendations Update to version 7.1.2-26 or later.