CVE-2026-116154Medium· 5.3▾ SunlitImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML dat…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service.
ImageMagick >= 7.0.0-0 < 7.1.2-33ImageMagick < 6.9.13-58Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116146Low· 3.7ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder
CVE-2026-116155Medium· 5.3ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile
CVE-2026-116150Low· 3.1ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder
CVE-2026-116151Low· 3.7ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder
CVE-2026-116152Medium· 5.3ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path
CVE-2026-116157Low· 3.3ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading