Memory Disclosure Vulnerability in ImageMagick TGA Image Decoder
CVE-2026-109259
6.9MEDIUM
What is CVE-2026-109259?
An information disclosure vulnerability exists in the TGA image decoder of ImageMagick, affecting versions prior to 6.9.13-57 and 7.x before 7.1.2-32. This flaw allows attackers to craft specific TGA images that can lead to the exposure of sensitive data held in uninitialized memory. When such an image is processed, the ImageMagick application may inadvertently disclose this memory content, posing a significant risk to users' confidentiality and data integrity.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-32
ImageMagick 0 < 6.9.13-57
ImageMagick 7.1.2-32