CVE-2026-109262
MEDIUM
6,9
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low
Description
AI Translation Available
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.
401
Missing Release of Memory after Effective Lifetime
DraftCommon Consequences
Security Scopes Affected:
Availability
Other
Potential Impacts:
Dos: Crash, Exit, Or Restart
Dos: Instability
Dos: Resource Consumption (Cpu)
Dos: Resource Consumption (Memory)
Reduce Performance
Applicable Platforms
Languages:
Not Language-Specific, C, C++
https://github.com/ImageMagick/ImageMagick6/commit/a568d698ffb3dd57134fef8e9b64…
https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432…
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-h…
https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-befor…