Policy Bypass Vulnerability in ImageMagick by ImageMagick

CVE-2026-116141

What is CVE-2026-116141?

ImageMagick prior to version 7.1.2-33 is susceptible to a policy bypass vulnerability within its UHDR decoder. This flaw can be exploited by attackers who create specially crafted UHDR images with oversized dimensions. Due to the manner in which extent checks are implemented—occurring post-decoding—attackers can successfully evade the image width and height limitations. The result is excessive consumption of system resources as the vulnerable application fully decodes these images before any policy limits are applied, leading to potential denial of service scenarios.

References