CVE-2026-116146
Public on 2026-10-25
Modified on 2026-10-28
Description
A flaw was found in ImageMagick. The Magick Scripting Language (MSL) decoder fails to release allocated memory when processing specially crafted MSL files. An attacker could exploit this vulnerability by providing malicious MSL files for processing, resulting in excessive resource consumption and a Denial of Service (DoS).
Severity
See what this means
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | ImageMagick | Pending Fix | ||
| Amazon Linux 2023 | ImageMagick | Pending Fix | ||
| Amazon Linux 2027 Preview | ImageMagick | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 3.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |