Is CVE-2026-86421 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86421?

CVE-2026-86421 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-86421

Description

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.