CVE-2026-116157

A flaw was found in ImageMagick. The PerlMagick component fails to properly release memory allocated when reading image properties. An attacker could exploit this vulnerability by repeatedly triggering property read operations to exhaust system memory, leading to a Denial of Service (DoS).

This vulnerability is rated with a Low severity because exploiting it requires an application to process user-supplied images through specific Perl bindings and only leads to resource exhaustion without compromising system integrity or confidentiality. Default installations and core command-line tools of ImageMagick do not invoke the affected PerlMagick subcomponent and remain unaffected. Impact is primarily restricted to persistent, long-running Perl processes that repeatedly query image attributes, as short-lived scripts naturally reclaim allocated memory upon process termination.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.