CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile

October 31, 2026 at 10:24

Quality: 8/10 Relevance: 9/10

Summary

CVE-2026-116155 describes a memory leak in ImageMagick caused by not destroying strings from a crafted XMP DOCTYPE. The article advises upgrading to patched versions and suggests a stopgap by filtering XMP profiles via policy.xml.

Vulnerability & CVE Security

Read Original Article