Is CVE-2026-61861 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-61861?

CVE-2026-61861 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-61861

Description

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.