CVE-2026-61872: ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ImageMagickto a version that resolves this vulnerability.Fixed in 7.1.2-26 - Upgrade
Upgrade
ImageMagickto a version that resolves this vulnerability.Fixed in 6.9.13-51
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61872?
The severity of CVE-2026-61872 is low with a score of 2.5.
How do I fix CVE-2026-61872?
To fix CVE-2026-61872, upgrade to ImageMagick version 7.1.2-26 or later.
What is the risk associated with CVE-2026-61872?
The risk associated with CVE-2026-61872 is classified as a memory leak that can lead to increased memory consumption.
Does CVE-2026-61872 affect all versions of ImageMagick?
CVE-2026-61872 affects ImageMagick versions before 7.1.2-26 and 6.9.13-51.
What type of vulnerability is CVE-2026-61872?
CVE-2026-61872 is a memory leak vulnerability specifically affecting the TIFF encoder.