Low severity2.5NVD Advisory· Published Oct 25, 2026

CVE-2026-116158

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <7.1.2-33

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qfnvd
www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-memory-leak-in-magick-comparenvd

News mentions

No linked articles in our index yet.

cvss	0.163
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000