Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-116152

No fix known CVSS 5.3

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger this error path repeatedly, causing small memory leaks that gradually consume process memory.

Published 2026-10-25 · CVE record · OSV

Products: imagemagick

Distro releases

ReleasePackageFixed in
Debian:12imagemagickno fix
Debian:13imagemagickno fix
Debian:14imagemagickno fix