CVE-2026-61867

What it actually does

A memory leak occurs in the TIFF encoder when memory allocation fails during image processing, leading to progressive memory exhaustion and eventual denial of service.

Why it matters to the business

Attackers can cause image processing services to become unavailable, disrupting workflows that rely on image handling and potentially leading to downtime in applications using this library.

How an attack unfolds

An attacker provides input that triggers TIFF encoding where memory allocation fails in vulnerable ImageMagick versions, causing the leak to exhaust system memory over repeated operations.

How to fix it

Update ImageMagick to version 7.1.2-26 or later to resolve the memory leak in the TIFF encoder.

How to confirm the fix worked

Confirm the installed ImageMagick version is 7.1.2-26 or newer; test processing of TIFF inputs under simulated allocation failure conditions to verify no leak occurs.

Typical attack path

1. Identify a target application or service using vulnerable ImageMagick for TIFF image handling
2. Craft or supply input that forces allocation failures during TIFF encoding
3. Trigger repeated processing to accumulate leaked memory
4. Observe system-wide memory exhaustion resulting in denial of service

How to detect it

Review system and application logs for repeated TIFF encoding attempts accompanied by memory allocation failures; monitor process memory consumption patterns during image handling.

What your security team should do

• Prioritize upgrade to ImageMagick 7.1.2-26 or later across all affected deployments
• Implement input validation and sandboxing for untrusted image files
• Monitor memory usage metrics for image processing workloads to detect anomalies