Memory Leak Vulnerability in ImageMagick by ImageMagick
CVE-2026-109260
6.3MEDIUM
What is CVE-2026-109260?
ImageMagick versions prior to 6.9.13-57 and 7.x prior to 7.1.2-32 present a vulnerability that causes a memory leak within the PNG encoding process. This occurs when the initialization of libpng fails, leading to allocated memory not being released. Attackers can exploit this vulnerability by consistently triggering PNG encoding failures, ultimately resulting in memory exhaustion and potential denial of service. Users of affected versions should apply the available patches to secure their systems against this issue.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-32
ImageMagick 0 < 6.9.13-57
ImageMagick 7.1.2-32