CVE-2026-61863: ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder
Published Jul 15, 2026
·Updated
ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.
Affected Software
4 affected components
ImageMagick ImageMagick<7.1.2-26
ImageMagick ImageMagick<6.9.13-51
ImageMagick ImageMagick<6.9.13-51
ImageMagick ImageMagick>=7.0.0-0<7.1.2-26
Event History
Jul 15, 2026
CVE Published
via MITRE·11:25 AM
Data Sourced
via MITRE·11:25 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-61863?
The severity of CVE-2026-61863 is classified as low, with a rating of 2.1.
2
What does CVE-2026-61863 affect?
CVE-2026-61863 affects ImageMagick versions before 7.1.2-26 and 6.x versions before 6.9.13-51.
3
What is the vulnerability in CVE-2026-61863?
CVE-2026-61863 is a memory leak vulnerability occurring in the TIFF encoder when a temporary file cannot be created.
4
How do I mitigate CVE-2026-61863?
To mitigate CVE-2026-61863, update ImageMagick to version 7.1.2-26 or later, or to version 6.9.13-51 or later.
5
Can CVE-2026-61863 lead to data loss?
CVE-2026-61863 does not directly cause data loss but could lead to increased memory usage due to the memory leak.