Ghostwire
Home / Vulnerabilities / CVE-2026-61866

CVE-2026-61866: ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened....

LOW CVSS 2.9 Exploit Available

Published: July 15, 2026 | Last Modified: July 16, 2026

Description

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Affected Products (1)

References