yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2026-86421
Component Overview
Vulnerability Overview
Name
CVE-2026-86421
Source
NVD (
link
)
Debian (
link
)
Description
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.
CWEs
CWE-400
Published Date
Sep 7, 2026
Updated Date
Sep 9, 2026
Workaround
-
Advisories
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x
Vendor Advisory
https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via-msl-decoder
Third Party Advisory
Analysis
#
Affected Component
Analysis
imagemagick
Exploitable
Vulnerability Ratings
#
6.3
CVSSv4
3.7
CVSSv31
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
imagemagick
buildroot
2025.02.x
7.1.2-26
Exploitable
imagemagick
buildroot
master
7.1.2-26
Exploitable
imagemagick
openwrt
master
7.1.2.29-r1
Not Affected
imagemagick
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
imagemagick
yocto
master
7.1.2-32
Not Affected
imagemagick
yocto
scarthgap
7.1.1-47
Exploitable