Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-61861

Опубликовано: 11 июл. 2026
Источник: nvd
CVSS3: 3.7
CVSS3: 7.5
EPSS Низкий

Описание

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-51 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-26 (исключая)

EPSS

Процентиль: 25%
0.00323
Низкий

3.7 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 3.7
ubuntu
23 дня назад

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

CVSS3: 5.9
redhat
23 дня назад

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

CVSS3: 3.7
debian
23 дня назад

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in ...

CVSS3: 3.7
github
23 дня назад

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

suse-cvrf
14 дней назад

Security update for ImageMagick

EPSS

Процентиль: 25%
0.00323
Низкий

3.7 Low

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416