A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.
Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.
{
"cwe_ids": [
"CWE-770",
"CWE-789"
],
"github_reviewed_at": "2026-02-24T15:44:19Z",
"github_reviewed": true,
"nvd_published_at": "2026-02-24T02:16:02Z",
"severity": "HIGH"
}