Memory Leak in ImageMagick GIF Encoder Affecting ImageMagick Software
CVE-2026-109261
6.3MEDIUM
What is CVE-2026-109261?
A memory leak vulnerability exists in the GIF encoder of ImageMagick prior to version 6.9.13-57 and 7.x prior to 7.1.2-32. This issue arises when the color quantization process fails during image encoding, resulting in allocated memory not being released. Attackers can exploit this vulnerability by supplying images that trigger quantization failures, leading to memory leaks with each failed encoding attempt. This degradation of memory resources can lead to availability issues, emphasizing the need for timely updates and patches.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-32
ImageMagick 0 < 6.9.13-57
ImageMagick 7.1.2-32