CVE-2026-61465
ImageMagick: ImageMagick: Denial of Service via crafted image due to missing memory allocation check
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 11, 2026
Updated · July 14, 2026
Description
A flaw was found in ImageMagick. This vulnerability occurs because ImageMagick is missing a check for the allowed memory allocation limit during certain image processing operations, such as when using the -canny function. A remote attacker could provide a specially crafted image, causing the software to allocate more memory than permitted by its configuration. This can lead to a denial of service (DoS), making the system or application unavailable to legitimate users.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-770 · Allocation of Resources Without Limits or Throttling