CVE-2026-61870

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>ImageMagick6</name>
	<range><lt>6.9.13-51</lt></range>
      </package>
      <package>
	<name>ImageMagick6-nox11</name>
	<range><lt>6.9.13-51</lt></range>
      </package>
      <package>
	<name>ImageMagick7</name>
	<range><lt>6.9.13-51</lt></range>
      </package>
      <package>
	<name>ImageMagick7-nox11</name>
	<range><lt>6.9.13-51</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>ImageMagick before 7.1.2-26 contains a memory leak vulnerability in
	the VIFF encoder when memory allocation fails. Attackers can trigger
	allocation failures by processing specially crafted VIFF images to
	exhaust available memory and cause denial of service.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-61870</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-61870</url>
    </references>
    <dates>
      <discovery>2026-07-11</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>