What is GHSA-mh47-95q8-vqh2?

GHSA-mh47-95q8-vqh2 is a security advisory published by GitHub Security Advisories with Low severity. ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command...

Which CVE IDs does GHSA-mh47-95q8-vqh2 cover?

GHSA-mh47-95q8-vqh2 covers the following CVE IDs: CVE-2026-116158. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mh47-95q8-vqh2?

GHSA-mh47-95q8-vqh2 has a CVSS v3 base score of 2.5, published by GitHub Security Advisories.

GHSA-mh47-95q8-vqh2LowCVSS 2.5

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command...

Vendor

GitHub Security Advisories

Published

October 25, 2026

Last Modified

October 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-116158 →

📋 Description

ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.

🔗 References (4)

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qf
https://nvd.nist.gov/vuln/detail/CVE-2026-116158
https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-memory-leak-in-magick-compare
https://github.com/advisories/GHSA-mh47-95q8-vqh2