CVE-2026-61865
ImageMagick: ImageMagick: Memory leak in hough lines operation can lead to denial of service
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 15, 2026
Updated · July 16, 2026
Description
A flaw was found in ImageMagick. When processing images, a memory leak can occur during the 'hough lines' operation if an internal process fails. This vulnerability could lead to a gradual depletion of system memory, potentially resulting in a denial of service (DoS) for the affected system.
Statement
Red Hat Enterprise Linux ships ImageMagick in RHEL 6 ELS and RHEL 7 ELS. This flaw has been rated as having a Low security impact and is not currently planned to be addressed in future updates of those products. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Do not process untrusted image files with ImageMagick. If processing of untrusted input is required, configure ImageMagick's policy.xml to set memory and map resource limits to contain the impact of potential memory leaks. Upgrade to ImageMagick 7.1.2-26 or 6.9.13-51 mitigates the issue.
CVSS / CWE
CVSS 3.1 · 2.9CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime