Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-07-11T13:01:09 ImageMagick: ImageMagick: Denial of Service via specially crafted VIFF images 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CWE-772

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

A flaw was found in ImageMagick. This vulnerability involves a memory leak within the VIFF encoder, a component responsible for handling image files. An attacker could exploit this by providing specially crafted VIFF images, which would trigger memory allocation failures. This action can exhaust available system memory, leading to a denial of service (DoS) where the system becomes unresponsive.

Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-61870 https://nvd.nist.gov/vuln/detail/CVE-2026-61870 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh https://www.vulncheck.com/advisories/imagemagick-before-26-memory-leak-via-viff-encoder