≈ the.bay.news

CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile

agilehunt.com
CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile
Agilehunt found CVE-2026-116155, a CWE-401 memory leak in ImageMagick where ParseInternalDoctype frees its parameter-entity vector but never destroys the owned value strings, so a crafted XMP profile leaks heap on every image read.

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.