CVE-2026-116150
Received Received - Intake

Memory Leak in ImageMagick FPX Encoder

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116150
EUVD
EUVD-2026-109411

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ImageMagick ImageMagick 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-401 The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ImageMagick before version 7.1.2-33 has a memory leak in the FPX encoder. Attackers can submit specially crafted images to trigger this leak repeatedly, causing memory exhaustion and leading to a denial of service condition.

Detection Guidance

To detect this vulnerability, monitor for excessive memory usage when processing FPX images. Check ImageMagick version with 'convert --version' or 'magick --version'. If version is below 7.1.2-33, the system is vulnerable. Test with crafted images from security advisories to observe memory leaks.

Impact Analysis

This vulnerability can cause system slowdowns or crashes due to memory exhaustion. It requires user interaction to exploit, meaning an attacker must trick a user into processing a malicious image.

Mitigation Strategies

Upgrade ImageMagick to version 7.1.2-33 or later immediately. Disable FPX encoding if not required by removing the FPX delegate from ImageMagick's configuration. Monitor system memory usage for unusual spikes during image processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116150. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart