CVE-2026-61870

脆弱性の種類

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

影響を受ける製品

• imagemagick imagemagick

参考情報

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh
• https://www.vulncheck.com/advisories/imagemagick-before-26-memory-leak-via-viff-encoder