{"id":81846,"date":"2026-07-11T17:46:23","date_gmt":"2026-07-11T14:16:23","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-61857-imagemagick-before-7-1-2-26-heap-use-after-free-via-xmp\/"},"modified":"2026-07-11T17:46:23","modified_gmt":"2026-07-11T14:16:23","slug":"cve-2026-61857-imagemagick-before-7-1-2-26-heap-use-after-free-via-xmp","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-61857-imagemagick-before-7-1-2-26-heap-use-after-free-via-xmp\/","title":{"rendered":"CVE-2026-61857 &#8211; ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP"},"content":{"rendered":"<p>CVE ID :CVE-2026-61857<\/p>\n<p>  Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago<\/p>\n<p>  Description :ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.<\/p>\n<p>  Severity: 6.3 | MEDIUM<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-61857 Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago Description :ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes. Severity: 6.3 | MEDIUM &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-81846","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/81846","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=81846"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/81846\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=81846"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=81846"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=81846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}