CVE-2026-109259 [MEDIUM] – ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.