[ CVE-2026-116158 · Published 25 Oct 2026 ]

Vulnerability in ImageMagick

CVSS 5.5 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund11 Oct 2026WID-SEC-2026-3867

ImageMagick: Multiple vulnerabilities Translated from German
CVE-2026-109964CVE-2026-116154CVE-2026-116149+11 more CVEs

[ References ]References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qfVendor Advisory
www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-memory-leak-in-magick-compareThird Party Advisory

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

ImageMagick: Multiple vulnerabilities Translated from German

[ References ]References