Dashboard / CVE-2026-116157

CVE-2026-116157

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 35/100
Published: 2026-10-25 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Passive
AT: None
VC: None
VI: None
VA: Low

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

35 / 100
✓ No authentication
✓ Low complexity

CVSS Score

4.8 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.11%
Raw Score 0.001110
Percentile 1.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00111
2026-10-28
0.00111

Intelligence Sources

mitre ref →
nvd ref →

External Links