medium5.3
CVE-2026-116154
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reache…
Impact
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service.
Affected products
| Product | Affected versions |
|---|---|
| ImageMagick | before 6.9.13-58 |
| 7.X | before 7.1.2-33 |
Versions were read from the advisory text. No structured product data has been published for this record yet.