Ghostwire

CVE-2026-116158: ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup...

LOW CVSS 0.0

Published: October 25, 2026 | Last Modified: October 25, 2026

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References