Skip to content
fr Sign in
4.8 Medium

CVE-2026-116159 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color…

Description

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading availability through resource exhaustion.

Affected products and versions

Product Affected versions Fixed in
ImageMagick 6.9 earliest → < 6.9.13-58 6.9.13-58

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ImageMagick

The 276 CVEs of ImageMagick →
CVE-2026-123273 ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder 7.1 High CVE-2026-119124 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause… 4.8 Medium CVE-2026-119123 ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder 6.3 Medium CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate 4.8 Medium
Track this CVE