ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d0a5b-d0c6-11f1-bae2-3497f65b111b advisory.

    The ImageMagick project published security advisories for               issues fixed in releases 7.1.2-26 through 7.1.2-34.  They include               heap buffer overflows, use-after-free, out-of-bounds reads,               integer overflows, division by zero, memory leaks and security               policy bypasses in various coders and in the command-line               interface.  A crafted image file can crash the process, disclose               memory contents or circumvent the configured security policy.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when
    invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed
    command-line arguments to consume system resources. (CVE-2026-66011)

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4376-1 advisory.

    - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided     (bsc#1272575).
    - CVE-2026-62363: heap buffer over-write in fx operation (bsc#1272582).
    - CVE-2026-62946: integer overflow in JNX decoder causes heap buffer over-write when processing extremly     large files on       32-bit builds (bsc#1272580).
    - CVE-2026-64685: heap buffer over-read in BGR decoder due to missing end-of-file check (bsc#1272953).
    - CVE-2026-66011: memory Leak when providing invalid options to the cli (bsc#1272577).
    - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696).
    - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711).
    - CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
    - CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797).
    - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).
    - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a     denial of       service (bsc#1281909).
    - CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910).
    - CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911).
    - GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797     (bsc#1272579).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21635-1 advisory.

    - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004).
    - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided     (bsc#1272575).
    - CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
    - CVE-2026-62946: integer overflow in JNX decoder leading to heap buffer overwrite when extremely large     files are       processed on 32-bit builds (bsc#1272580).
    - CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided     (bsc#1272577).
    - CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check (bsc#1272953).
    - Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host has a version of ImageMagick installed that is 7.x prior to 7.1.2-27. It is, therefore, affected by a vulnerability.

  - ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when     invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed     command-line arguments to consume system resources. (CVE-2026-66011)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3414-1 advisory.

    - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided     (bsc#1272575).
    - CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
    - CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when processing     extremely large       files on 32-bit builds (bsc#1272580).
    - CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided     (bsc#1272577).
    - GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797     (bsc#1272579).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when     invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed     command-line arguments to consume system resources. (CVE-2026-66011)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
372203	FreeBSD : ImageMagick7 -- multiple vulnerabilities (fc4d0a5b-d0c6-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	Local	high
474877	Echo: imagemagick: security update to 8:7.1.2.27+dfsg1-1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
474877	Echo: imagemagick: security update to 8:7.1.2.27+dfsg1-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
350982	SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4376-1)	Nessus	SuSE Local Security Checks	Local	medium
341164	openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21635-1)	Nessus	SuSE Local Security Checks	Local	medium
333339	ImageMagick 7.x < 7.1.2-27 Memory Leak	Nessus	Misc.	Local	medium
331432	SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3414-1)	Nessus	SuSE Local Security Checks	Local	medium
330027	Linux Distros Unpatched Vulnerability : CVE-2026-66011	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-66011

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium