CVE-2026-86421

Description

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.

Affected Platforms

Weakness Type

CWE-400

References

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f…
• https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-30-memory-leak-via…