Dashboard / CVE-2026-116158

CVE-2026-116158

LOW
INFO Priority: 0.00 BB Relevance: 19/100
Published: 2026-10-25 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

No Auth

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Passive
AT: Present
VC: None
VI: None
VA: Low

Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

19 / 100
✓ No authentication

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.10%
Raw Score 0.001030
Percentile 1.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00103
2026-10-28
0.00103

Intelligence Sources

mitre ref →
nvd ref →

External Links