ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak… (CVE-2026-61865)

CVE-2026-61865 describes a memory leak vulnerability in ImageMagick's hough lines operation present in versions prior to 7.1.2-26 and 6.9.13-51. When a particular operation within this function fails, a small amount of memory is not properly released, leading to a memory leak. The vulnerability has been assigned a CVSS v3.1 score of 2.9, indicating low impact on confidentiality and integrity but some impact on availability due to resource exhaustion. Multiple affected versions, including various Ubuntu package versions, are listed. Official patches are available as per Ubuntu security notices USN-8739-1 and USN-8739-2.

The vulnerability causes a memory leak in the hough lines operation of ImageMagick, which could lead to resource exhaustion and reduced availability of the affected system or service. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported.

A patch is available and should be applied to affected ImageMagick versions. Refer to the official Ubuntu security notices USN-8739-1 and USN-8739-2 for patch details and update instructions.