← Back to CVE search

CVE-2026-66011

ImageMagick

Description

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

CVSS 3.3EPSS 0.092%Risk 0.33
View source
Published
2026-07-25 11:17:18
Affected versions
<7.1.2-27
Type
Other
Last modified
2026-08-04 13:52:56
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L