GHSA-9vrj-jmgx-4wj7MediumCVSS 3.3

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of...

Published
October 25, 2026
Last Modified
October 25, 2026

🔗 CVE IDs covered (1)

📋 Description

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading availability through resource exhaustion.

🔗 References (4)