VULNERABILITY INTELLIGENCE
CVE-2026-116157
CVSS score3.3 LOW
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-10-25
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Description
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.
Weakness classification
- disclosure@vulncheck.com: CWE-401