{"id":"CVE-2026-116151","kind":"vulnerability","aliases":["CVE-2026-116151"],"related":[],"title":"ImageMagick: crafted images leak memory in the JNG encoder","description":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted images that are encoded to JNG to leak memory, potentially causing resource exhaustion and a limited denial of service.","summary":"ImageMagick's JNG encoder fails to free allocated memory when it processes a crafted image. An attacker who supplies such images can exhaust memory and cause a limited denial of service.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["image-processing","imagemagick","package","self-hosted"],"not_affected_if":["jng-encoding-unused","no-untrusted-input"],"how_to_check":"- Run `magick -version` (or `convert -version`) and compare the reported version with the fixed releases below.\n- Check whether the service converts user-supplied images to JNG format.","fix":"- Upgrade ImageMagick 6 to `6.9.13-58` or later.\n- Upgrade ImageMagick 7 to `7.1.2-33` or later.","status":"open","published_at":"2026-10-25T14:16:53+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","triaged_at":"2026-10-25T14:42:50+00:00","updated_at":"2026-10-25T14:42:50+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T14:42:50Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade ImageMagick 6 to `6.9.13-58` or later.\n- Upgrade ImageMagick 7 to `7.1.2-33` or later.","reach":"unknown","title":"ImageMagick: crafted images leak memory in the JNG encoder","impact":"low","summary":"ImageMagick's JNG encoder fails to free allocated memory when it processes a crafted image. An attacker who supplies such images can exhaust memory and cause a limited denial of service.","category":"package","nicknames":[],"who_cares":["imagemagick","self-hosted","image-processing"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Memory exhaustion causes a limited denial of service on the converting host.","analyst_note":"","how_to_check":"- Run `magick -version` (or `convert -version`) and compare the reported version with the fixed releases below.\n- Check whether the service converts user-supplied images to JNG format.","needs_analyst":false,"not_affected_if":["no-untrusted-input","jng-encoding-unused"],"who_is_affected":"Systems that run ImageMagick versions before 6.9.13-58 or 7.x before 7.1.2-33 and encode images to JNG, especially when the images come from untrusted users. Systems that do not run ImageMagick, or that never encode to JNG from outside input, are unlikely to be exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000594,"input_tokens":3344,"output_tokens":519,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116151':12A,15A '-2026':11A,14A '-33':64C '-58':58C '6.9.13':57C '7':60C '7.1.2':63C 'alloc':31B,77C 'attack':40B,84C 'caus':49B,98C 'contain':65C 'craft':2A,37B,82C,87C 'cve':10A,13A 'denial':52B,104C 'encod':9A,27B,72C,91C 'exhaust':46B,100C 'fail':28B,74C 'free':30B 'host':23B 'imag':3A,17B,38B,44B,83C,88C 'image-process':16B 'imagemagick':1A,19B,24B,55C 'jng':8A,26B,71C,93C 'leak':4A,68C,95C 'limit':51B,103C 'memori':5A,32B,47B,67C,78C,96C 'packag':20B 'potenti':97C 'process':18B,35B,80C 'releas':76C 'resourc':99C 'self':22B 'self-host':21B 'servic':54B,106C 'suppli':42B,86C 'x':61C","nicknames":[],"mitigations":[],"who_affected":"Systems that run ImageMagick versions before 6.9.13-58 or 7.x before 7.1.2-33 and encode images to JNG, especially when the images come from untrusted users. Systems that do not run ImageMagick, or that never encode to JNG from outside input, are unlikely to be exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:53+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116151","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116151","severity":null,"published_at":"2026-10-25T14:16:53+00:00","modified_at":"2026-10-25T14:16:53+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","fetched_at":"2026-10-25T14:41:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}