CVE-2026-109262
ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 13, 2026
Updated · November 4, 2026
Description
A flaw was found in ImageMagick. This flaw allows a remote attacker to cause a Denial of Service (DoS) by supplying a specially crafted image file. When the file is processed by the Scalable Vector Graphics (SVG) encoder, the application fails to properly release allocated memory, leading to excessive system resource consumption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime