Dashboard / CVE-2026-61872

CVE-2026-61872

LOW
INFO Priority: 0.00 BB Relevance: 19/100
Published: 2026-07-15 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

No Auth

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Passive
AT: Present
VC: None
VI: None
VA: Low

Description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
ImageMagick ImageMagick 7.0.0 < 7.1.2-26
ImageMagick ImageMagick 0 < 6.9.13-51
ImageMagick ImageMagick 7.0.0 < 7.1.2-26
ImageMagick ImageMagick 0 < 6.9.13-51

References & Advisories (2)

Bug Bounty Relevance

19 / 100
✓ No authentication

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.10%
Raw Score 0.000960
Percentile 0.7%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links