ImageMagick before 7.1.2-26 Use-After-Free via freetype

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-61860 · Microsoft / collected KEV context

EUVD-2026-44610

GHSA-9jv5-jcq7-xww3

GHSA-6jwg-7q3p-5fqm

cve-program · CVE-2026-61860

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm
• https://www.vulncheck.com/advisories/imagemagick-before-26-use-after-free-via-freetype

euvd · EUVD-2026-44610

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm
• https://www.vulncheck.com/advisories/imagemagick-before-26-use-after-free-via-freetype

nvd · CVE-2026-61860

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm
• https://www.vulncheck.com/advisories/imagemagick-before-26-use-after-free-via-freetype

osv · GHSA-6jwg-7q3p-5fqm

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm
• https://github.com/ImageMagick/ImageMagick
• https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

• ImageMagick before 7.1.2-26 Use-After-Free via freetype · Affected-version evidence changed · 29 Oct 2026