CVE-2026-61860 — ImageMagick before 7.1.2-26 Use-After-Free via freetype
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use m…
Published: 2026-07-15 · CVSS: 6.3 · CVSS 4.0
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7