Live › vulnerability › CVE-2026-116152
Go to dashboardImageMagick before 7.1.2-33 fails to free memory in an error path of its MAT image decoder. Repeatedly feeding it crafted MAT files gradually consumes process memory, which can degrade or crash a service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Systems that run ImageMagick below 7.1.2-33 and pass it user-supplied MAT files, for example an upload or conversion service. Installations that never decode MAT input, or that already run 7.1.2-33 or later, can skip it.
No product ranges from the sources yet.
magick -version and compare the version to 7.1.2-33.7.1.2-33 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger this error path repeatedly, causing small memory leaks that gradually consume process memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-116152")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.