Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-116147

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a DJVU image that, when processed under conditions where the allocation fails, crashes the process and causes a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.8%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2026-116147


Contact Us

Shodan ® - All rights reserved