CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile
agilehunt.com
CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile
Agilehunt found CVE-2026-116155, a CWE-401 memory leak in ImageMagick where ParseInternalDoctype frees its parameter-entity vector but never destroys the owned value strings, so a crafted XMP profile leaks heap on every image read.
0 comments
No comments yet.