CVE-2026-109259: ImageMagick patched two memory-handling flaws. A crafted TGA image can trigger an uninitialized memory read (CVE-2026-109259) disclosing process memory; a crafted image triggers an SVG encoder leak (CVE-2026-109262) causing denial of service. Versions before 6.9.13-57 and 7.x before 7.1.2-32 are affected; fixed in 6.9.13-57 and 7.1.2-32. https://www.cve.org/CVERecord?id=CVE-2026-109259 #infosec #cybersecurity