PT-2026-86787 · Imagemagick+1 · Imagemagick

·

CVE-2026-86421

·

Published

2026-09-07

·

Updated

2026-09-07

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.

Exploit

Fix

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86421
GHSA-4JV7-Q6XW-6F4X

Affected Products

Imagemagick