ImageMagick: Use-After-Free when freetype initialization fails

LOW 3.7CVE-2026-61860 · GHSA-6jwg-7q3p-5fqm · Published 15/07/2026 · updated 29/10/2026

Package	Affected versions	Patched versions
Magick.NET-Q16-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-HDRI-x86 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-OpenMP-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q16-x86 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-AnyCPU NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-OpenMP-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-OpenMP-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-arm64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-x64 NuGet	`< 14.15.0`	`14.15.0`
Magick.NET-Q8-x86 NuGet	`< 14.15.0`	`14.15.0`

Description

When the freetype initialization fails the method does not exit and uses memory that was freed.

NVD description

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free