ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.
{
"license": "CC-BY-4.0",
"sources": [
{
"database_specific": {
"status": "Deferred"
},
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61464",
"id": "CVE-2026-61464",
"imported": "2026-07-30T14:10:42.188Z",
"modified": "2026-07-15T18:20:21.237Z",
"published": "2026-07-15T12:18:20.623Z",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-61464"
},
{
"html_url": "https://github.com/advisories/GHSA-mqfp-wcwx-w65x",
"id": "GHSA-mqfp-wcwx-w65x",
"imported": "2026-07-30T14:10:37.384Z",
"modified": "2026-07-15T12:32:10Z",
"published": "2026-07-15T12:32:04Z",
"url": "https://api.github.com/advisories/GHSA-mqfp-wcwx-w65x"
},
{
"html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44652",
"id": "EUVD-2026-44652",
"imported": "2026-07-30T14:08:51.005Z",
"modified": "2026-07-15T13:25:15Z",
"published": "2026-07-15T11:25:47Z",
"url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-44652"
}
]
}