CVE-2026-61866

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion.

• CWE-401

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-99w9-hv66-rfv7Vendor Advisory
• https://www.vulncheck.com/advisories/imagemagick-before-26-memory-leak-in-jng-encoderThird Party Advisory

Published

Jul 15, 2026

Last Modified

Jul 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-61860ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-aft…6.3
• CVE-2026-61861ImageMagick before 7.1.2-26 contains a use-after-free vulner…7.5
• CVE-2026-61862ImageMagick before 7.1.2-26 and 6.9.13-51 contains an inform…2.9
• CVE-2026-61863ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) conta…7.5
• CVE-2026-61864ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory …2.9
• CVE-2026-61865ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory …2.9
• CVE-2026-61867ImageMagick before 7.1.2-26 contains a memory leak vulnerabi…2.9
• CVE-2026-61868ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 conta…6.3
• CVE-2026-61869ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory …2.9
• CVE-2026-6187A vulnerability was detected in SourceCodester Pharmacy Sale…7.3
• CVE-2026-61870ImageMagick before 7.1.2-26 contains a memory leak vulnerabi…7.5
• CVE-2026-61871ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory …6.3