CVE-2026-116155

LOWCVSS 6.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory each time they are processed, leading to resource exhaustion and denial of service.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Referenced assets2 URLs

By indicator

Full discourse2 posts

Vikas Anil Sharma@VikzSharma1d
My latest security research uncovered two memory-leak vulnerabilities in ImageMagick, assigned CVEs: CVE-2026-116154 and CVE-2026-116155. Subtle flaws in XML/XMP parsing, with the potential to cause remote denial of service. 🔬 Both have been responsibly disclosed and patched. The full technical breakdown, reproduction, and ASan evidence are now live on the blog. 🔗 https://blog.agilehunt.com/blog/imagemagick-cve-2026-116154-xml-depth-limit-memory-leak #ImageMagick #CVE #VulnerabilityResearch
0503291.5K
2.1K followersView on X
Agilehunt - Guarding your innovation.@AgileHunt1d
https://blog.agilehunt.com/blog/imagemagick-cve-2026-116155-xmp-profile-parameter-entity-memory-leak
0000026
9 followersView on X

Explore more

Back to dashboard