Low severity3.3NVD Advisory· Published Oct 25, 2026

CVE-2026-116157

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-33

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3nvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-memory-leak-in-perlmagick-property-readingnvd

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000