CVE-2026-61465

ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass

Published Jul 11, 2026 CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Description

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

Analysis

Technical impact

ImageMagick before 7.1.2-26 and 6.9.13-51 lacks a check for the allowed memory allocation limit when performing matrix-backed operations such as -canny. An attacker can supply a crafted image that causes the library to allocate more memory than the configured policy permits, which can exhaust system resources and lead to a denial of service. This weakness corresponds to CWE-770, indicating a failure in proper resource management.

Affected Systems

The affected product is ImageMagick, specifically versions prior to 7.1.2-26 and 6.9.13-51. Any system or application that relies on these versions to process images is potentially impacted.

Risk and Exploitability

The CVSS score of 4.8 indicates a moderate impact. likelihood of exploitation, and the vulnerability is not listed in CISA KEV, further reducing the chances of widespread attacks. Attack vector is inferred to involve an attacker supplying a malicious image to. Successful exploitation would consume memory resources and may crash or halt the service handling the image, leading to denial of service. The practical feasibility depends on whether the application memory‑allocation path in the version in use. The EPSS score of < 1% indicates a very low probability of exploitation.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

ImageMagick

unaffected

Version	Status	Constraints
`7.0.0`	affected	< 7.1.2-26
`7.1.2-26`	unaffected	—

ImageMagick

unaffected

Version	Status	Constraints
`0`	affected	< 6.9.13-51
`6.9.13-51`	unaffected	—

Configuration 1 [-]

OR	cpe:2.3:a:imagemagick:imagemagick::::::::
	cpe:2.3:a:imagemagick:imagemagick::::::::

No data.

Vendor Product Versions

Imagemagick

Version	Status	Scheme	Platform
`[0,7.1.2-26)`	affected	semver	—
`7.1.2-26`	unaffected	semver	—
`[0,6.9.13-51)`	affected	semver	—
`6.9.13-51`	unaffected	semver	—

Imagemagick

Version	Status	Scheme	Platform
`[0,7.1.2-26)`	affected	semver	—
`7.1.2-26`	unaffected	semver	—

Imagemagick

Version	Status	Scheme	Platform
`[0,6.9.13-51)`	affected	semver	—
`6.9.13-51`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade ImageMagick to version 7.1.2-26 or newer, or to 6.9.13-51 or newer, to include the patch that restores the memory allocation limit check.
If an upgrade cannot be performed immediately, reduce the configured memory allocation policy limit or disable matrix-backed operations such as -canny to prevent excessive memory usage.
Implement input validation for all images before they reach ImageMagick, ensuring that size, format and integrity are checked to prevent maliciously crafted images from triggering the vulnerability.

Generated by OpenCVE AI on August 1, 2026 at 11:24 UTC.

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4696-1	imagemagick security update
Ubuntu USN	USN-8739-1	ImageMagick vulnerabilities
Ubuntu USN	USN-8739-2	ImageMagick vulnerabilities

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.173% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh
https://nvd.nist.gov/vuln/detail/CVE-2026-61465
https://www.cve.org/CVERecord?id=CVE-2026-61465
https://www.vulncheck.com/advisories/imagemagick-before-26-memory-allocation-policy-bypass

History

Jul 14, 2026 3:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jul 12, 2026 12:15 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2026-61465 https://www.cve.org/CVERecord?id=CVE-2026-61465
Metrics	threat_severity `None`	threat_severity `Moderate`

Jul 11, 2026 1:30 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.
Title		ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass
First Time appeared		Imagemagick Imagemagick imagemagick
Weaknesses		CWE-770
CPEs		cpe:2.3:a:imagemagick:imagemagick::::::::
Vendors & Products		Imagemagick Imagemagick imagemagick
References		https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh https://www.vulncheck.com/advisories/imagemagick-before-26-memory-allocation-policy-bypass
Metrics		cvssV3_1 `{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}` cvssV4_0 `{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N'}`