CVE-2026-25969

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a patch.

• CWE-401

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xgm3-v4r9-wfgmThird Party Advisory

Published

Feb 24, 2026

Last Modified

Jun 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25963Fleet is open source device management software. In versions…6.5
• CVE-2026-25964Tandoor Recipes is an application for managing recipes, plan…4.9
• CVE-2026-25965ImageMagick is free and open-source software used for editin…7.5
• CVE-2026-25966ImageMagick is free and open-source software used for editin…7.8
• CVE-2026-25967ImageMagick is free and open-source software used for editin…7.5
• CVE-2026-25968ImageMagick is free and open-source software used for editin…9.8
• CVE-2026-2597Crypt::SysRandom::XS versions before 0.010 for Perl is vulne…7.5
• CVE-2026-25970ImageMagick is free and open-source software used for editin…7.5
• CVE-2026-25971ImageMagick is free and open-source software used for editin…9.8
• CVE-2026-25972An improper neutralization of input during web page generati…6.1
• CVE-2026-25973Rejected reason: Not used
• CVE-2026-25974Rejected reason: Not used