Is CVE-2026-61867 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-61867?

CVE-2026-61867 has a CVSS v3 severity of LOW (2.9).

Back

CVE-2026-61867

Description

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.