DEBIAN-CVE-2026-116150: Low severity debian/imagemagick vulnerability

Q: Which ImageMagick versions are affected?

ImageMagick versions before 7.1.2-33 are affected. Debian systems using the imagemagick package should determine whether their installed version is earlier than that release.

Q: What must an attacker be able to do to exploit this issue?

An attacker needs a way to submit crafted images to a workflow that performs FPX encoding. Repeated submissions can leak memory and exhaust resources; the supplied scoring data indicates no prior privileges are required, but user interaction and additional attack conditions are involved.

Published Oct 25, 2026

Updated

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.

Affected Software

3 affected componentsFixes available

debian/imagemagick*

debian/imagemagick<8:7.1.2.33+dfsg1-1

8:7.1.2.33+dfsg1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/imagemagick to a version that resolves this vulnerability.
Fixed in 8:7.1.2.33+dfsg1-1

Event History

Oct 25, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which ImageMagick versions are affected?

ImageMagick versions before 7.1.2-33 are affected. Debian systems using the imagemagick package should determine whether their installed version is earlier than that release.

What must an attacker be able to do to exploit this issue?

An attacker needs a way to submit crafted images to a workflow that performs FPX encoding. Repeated submissions can leak memory and exhaust resources; the supplied scoring data indicates no prior privileges are required, but user interaction and additional attack conditions are involved.

DEBIAN-CVE-2026-116150: Low severity debian/imagemagick vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which ImageMagick versions are affected?

What must an attacker be able to do to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which ImageMagick versions are affected?

What must an attacker be able to do to exploit this issue?