Cloudanix VulnDB

CVE-2026-116150

Low · 3.1

CVSS

3.1

EPSS

0.2%

Published

Oct 25, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in widely used image software lets attackers crash systems that handle pictures by sending specially crafted files, interrupting any service that processes images online.

Exploitation
Requires User Interaction
Attacker needs
User Interaction
Complexity
Moderate
Impact
Denial Of Service
Component
Library
Class
Memory Corruption
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Memory leak in the FPX encoder causes repeated allocations without corresponding releases when processing specially crafted images, leading to unbounded heap growth and eventual process termination or denial of service.

Why it matters to the business

Applications that process user-supplied images can experience service disruption and resource exhaustion when attackers repeatedly submit malicious files, resulting in downtime for image-handling workflows.

How an attack unfolds

An attacker creates a malformed FPX image designed to trigger the encoder leak, then submits it through any interface that invokes ImageMagick for FPX encoding; repeated submissions accumulate memory until the process is killed or becomes unresponsive.

How to fix it

Upgrade ImageMagick to version 7.1.2-33 or later; rebuild any dependent applications against the patched library and restart affected services.

How to confirm the fix worked

Verify installed ImageMagick version is at least 7.1.2-33; run regression tests with known triggering FPX samples while monitoring resident set size to confirm memory remains stable.

Typical attack path

  1. Locate an application or service that accepts and encodes images using ImageMagick
  2. Generate or obtain a crafted FPX file that exercises the leaking code path
  3. Submit the file repeatedly via upload, API, or automated processing
  4. Monitor for memory growth until the target process exhausts resources and crashes or hangs

How to detect it

Review application logs and process monitoring for repeated ImageMagick invocations on FPX files accompanied by steadily increasing memory consumption; inspect package inventories for versions prior to 7.1.2-33.

What your security team should do

  • Prioritize upgrade of ImageMagick to 7.1.2-33 or newer across all environments within the next maintenance window
  • Add size and format validation or sandboxing for image-processing pipelines until patches are deployed
  • Enable resource limits (ulimit, cgroups) on ImageMagick processes to contain memory usage

The record

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image. Attackers can submit crafted images for FPX encoding to leak memory repeatedly, causing resource exhaustion and denial of service.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities