UBUNTU-CVE-2026-116150: Low severity ubuntu/imagemagick vulnerability
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using ImageMagick to encode attacker-controlled or otherwise untrusted images as FPX are exposed. The impact is repeated memory consumption that can lead to denial of service.
What must an attacker do to trigger the vulnerability?
An attacker must supply a crafted image that is processed through the FPX encoder. Exploitation requires user interaction and has high attack complexity according to the supplied severity vector.
What can be done if updating is not immediately possible?
Avoid or restrict FPX encoding for untrusted image inputs, and limit who can submit images for conversion. Monitor ImageMagick-related processes for abnormal memory growth and enforce resource limits where available.