CVE Database›Document archive›CVE-2026-61865

CVE-2026-61865

ImageMagick: ImageMagick: Memory leak in hough lines operation can lead to denial of service

Loading…

Severity

Low

Red Hat Product Security

2.9

CVSS 3.1

Review impact separately from score.

Published · July 15, 2026

Updated · July 16, 2026

Description

A flaw was found in ImageMagick. When processing images, a memory leak can occur during the 'hough lines' operation if an internal process fails. This vulnerability could lead to a gradual depletion of system memory, potentially resulting in a denial of service (DoS) for the affected system.

Statement

Red Hat Enterprise Linux ships ImageMagick in RHEL 6 ELS and RHEL 7 ELS. This flaw has been rated as having a Low security impact and is not currently planned to be addressed in future updates of those products. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Do not process untrusted image files with ImageMagick. If processing of untrusted input is required, configure ImageMagick's policy.xml to set memory and map resource limits to contain the impact of potential memory leaks. Upgrade to ImageMagick 7.1.2-26 or 6.9.13-51 mitigates the issue.

CVSS / CWE

CVSS 3.1 · 2.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime