Memory Leak in ImageMagick's YUV Encoder Affects Multiple Versions
CVE-2026-109263
6.3MEDIUM
What is CVE-2026-109263?
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 are affected by a memory leak in the YUV encoder. This vulnerability occurs when a specific operation fails, leading to allocated memory not being released. Attackers can exploit this flaw by providing crafted input that triggers the failure, resulting in a memory leak and potential resource exhaustion, which could culminate in a denial of service. Users are advised to update to the latest versions to mitigate any associated risks.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-32
ImageMagick 0 < 6.9.13-57
ImageMagick 7.1.2-32