CVE-2026-61870
LOW2.9CVSS v3
—CVSS v2
0.19%
EPSS (exploit probability)
CWE-401CWE
Description
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.
CVSS v3 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.