CVE-2026-66011 — ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options
ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion …
Published: 2026-07-25 · CVSS: 4.8 · CVSS 4.0
ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7