Live › vulnerability › CVE-2026-116150
Go to dashboardImageMagick before 7.1.2-33 leaks memory in its FPX encoder when it processes a crafted image. Repeated submissions exhaust memory and cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Teams running ImageMagick versions before 7.1.2-33 that accept untrusted images and convert them to FPX format. Systems that never encode FPX, or that only process trusted images, are much less exposed.
No product ranges from the sources yet.
magick -version to read the installed ImageMagick version7.1.2-33 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-116150")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.