CVE-2026-116158

A flaw was found in ImageMagick. A missing cleanup operation during failed compare routines causes an unreleased memory leak. An attacker could supply crafted inputs that trigger repeated comparison errors, resulting in excessive resource consumption and leading to a Denial of Service (DoS).

This vulnerability is rated with a Low impact because ImageMagick utilities in Red Hat environments are primarily executed as ephemeral CLI tasks where allocated memory is immediately reclaimed by the kernel upon process exit. A denial of service requires an attacker to convince a user or automated service to repeatedly process malformed inputs through a long-running, persistent process that fails to restart or manage memory across failed comparison operations. The issue presents no threat to data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.