Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-116157

ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 7.1.2-33affected
  • 7.1.2-33unaffected

References