CVE-2026-61869

A flaw was found in ImageMagick. A memory leak in the Magick Image File Format (MIFF) encoder can occur when the software attempts to process an image and a memory allocation fails. This vulnerability allows an attacker to cause a denial of service (DoS) by exhausting system resources.

Red Hat Enterprise Linux ships ImageMagick in RHEL 6 ELS and RHEL 7 ELS. This flaw has been rated as having a Low security impact and is not currently planned to be addressed in future updates of those products. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not process untrusted image files with ImageMagick. The MIFF coder can be disabled in ImageMagick's policy.xml if not needed: <policy domain="coder" rights="none" pattern="MIFF"/>. Upgrade to ImageMagick 7.1.2-26 or 6.9.13-51 mitigates the issue.