CVE-2026-116143

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-58 ImageMagick versions prior to 7.1.2-33

Description A policy bypass exists in the PS, PDF, and XPS decoders. This flaw allows the security policy's list length limit on scene selection to be circumvented. By providing a specific argument, an attacker can force the software to process more scenes than permitted, which may lead to resource exhaustion.

Recommendations Update to version 6.9.13-58 or later. Update to version 7.1.2-33 or later.