Executive brief
ImageMagick is a widely used software suite for editing and processing digital images. A flaw in its image analysis tools can cause the software to fail to release small amounts of memory when certain operations fail. While the impact is low, repeated triggers could theoretically lead to increased memory consumption, potentially slowing down systems that process large volumes of images.
Technical details
A memory leak (CWE-401) exists in ImageMagick's Hough line detection operation. The vulnerability is triggered when a specific sub-operation within the Hough lines routine fails, causing the application to neglect releasing a small amount of allocated memory. Exploitation requires local access and is considered high complexity as it depends on specific failure states during image processing. The primary impact is a minor loss of availability due to resource exhaustion if the leak is triggered repeatedly. The issue is resolved in versions 7.1.2-26 and 6.9.13-51.
Affected products
- ImageMagick ImageMagick < 7.1.2-26, < 6.9.13-51
Timeline
- 2026-06-26: advisory: GitHub Security Advisory published
- 2026-07-15: disclosed: NVD publication date