CVE-2026-116155: ImageMagick Memory Leak via Crafted XMP Profile | AgileHunt
www.agilehunt.com
Agilehunt found CVE-2026-116155, a CWE-401 memory leak in ImageMagick where ParseInternalDoctype frees its parameter-entity vector but never destroys the owned value strings, so a crafted XMP profile leaks heap on every image read.