Skip to content
fr Sign in
2.0 Low

CVE-2026-116158 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup…

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

Affected products and versions

Product Affected versions Fixed in
ImageMagick 7.1 earliest → < 7.1.2-33 7.1.2-33

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ImageMagick

The 276 CVEs of ImageMagick →
CVE-2026-123273 ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder 7.1 High CVE-2026-119124 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause… 4.8 Medium CVE-2026-119123 ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder 6.3 Medium CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate 4.8 Medium
Track this CVE