Ghostwire

CVE-2026-61861: ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory...

LOW CVSS 3.7 Exploit Available

Published: July 11, 2026 | Last Modified: July 11, 2026

Description

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvxh-prvr-85w2
www.vulncheck.com/advisories/imagemagick-before-26-use-after-free-in-formatmagic
www.tenable.com/cve/CVE-2026-61861
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-61861