DEBIAN-CVE-2026-116157: Medium severity debian/imagemagick vulnerability

Q: Who is exposed to this issue?

Systems using ImageMagick's PerlMagick interface before version 7.1.2-33 are affected. The issue is relevant where an attacker can cause repeated image-property reads through PerlMagick.

Q: What does an attacker need to do to cause impact?

An attacker needs to repeatedly trigger property reads at one of five affected PerlMagick code locations. Successful exploitation exhausts memory and causes a denial of service.

Q: What is the practical impact?

The described impact is memory exhaustion leading to denial of service. No confidentiality or integrity impact is stated.

Published Oct 25, 2026

Updated

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.

Affected Software

3 affected componentsFixes available

debian/imagemagick*

debian/imagemagick<8:7.1.2.33+dfsg1-1

8:7.1.2.33+dfsg1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/imagemagick to a version that resolves this vulnerability.
Fixed in 8:7.1.2.33+dfsg1-1

Event History

Oct 25, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems using ImageMagick's PerlMagick interface before version 7.1.2-33 are affected. The issue is relevant where an attacker can cause repeated image-property reads through PerlMagick.

What does an attacker need to do to cause impact?

An attacker needs to repeatedly trigger property reads at one of five affected PerlMagick code locations. Successful exploitation exhausts memory and causes a denial of service.

What is the practical impact?

The described impact is memory exhaustion leading to denial of service. No confidentiality or integrity impact is stated.

DEBIAN-CVE-2026-116157: Medium severity debian/imagemagick vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to cause impact?

What is the practical impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to cause impact?

What is the practical impact?