Logo
vulnerabilityCVE-2026-61870
Name
CVE-2026-61870
Source
NVD ( link)Debian ( link)
Description
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
imagemagick
Exploitable

Vulnerability Ratings#


2.1
CVSSv4
2.9
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.1.2-26
Not Affected
buildroot
master
7.1.2-26
Not Affected
openwrt
master
7.1.2.29-r1
Not Affected
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
yocto
master
7.1.2-29
Not Affected
yocto
scarthgap
7.1.1-47
Exploitable