CVE-2026-61867EPSS p2.8%

CVE-2026-61867CVE-2026-61867

Description

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.

Scoring

CVSS 2.9 ()
VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS0.14% probability of exploitation · percentile 2.8% · 2026-10-05T12:00:23Z
Last modified2026-07-15
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.