ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted, potentially exhausting resources.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS
    decoders that allows the security policy's list length limit on scene selection to be circumvented.
    Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted,
    potentially exhausting resources. (CVE-2026-116143)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d0a5b-d0c6-11f1-bae2-3497f65b111b advisory.

    The ImageMagick project published security advisories for               issues fixed in releases 7.1.2-26 through 7.1.2-34.  They include               heap buffer overflows, use-after-free, out-of-bounds reads,               integer overflows, division by zero, memory leaks and security               policy bypasses in various coders and in the command-line               interface.  A crafted image file can crash the process, disclose               memory contents or circumvent the configured security policy.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fc4d429d-d0c6-11f1-bae2-3497f65b111b advisory.

    The ImageMagick project published security advisories for               issues fixed in releases 6.9.13-51 through 6.9.13-59.  They include               heap buffer overflows, use-after-free, out-of-bounds reads,               integer overflows, division by zero, memory leaks and security               policy bypasses in various coders.  A crafted image file can               crash the process, disclose memory contents or circumvent the               configured security policy.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS     decoders that allows the security policy's list length limit on scene selection to be circumvented.
    Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted,     potentially exhausting resources. (CVE-2026-116143)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477534	Echo: imagemagick: security update to 8:7.1.2.33+dfsg1-1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
477534	Echo: imagemagick: security update to 8:7.1.2.33+dfsg1-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
372203	FreeBSD : ImageMagick7 -- multiple vulnerabilities (fc4d0a5b-d0c6-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	Local	medium
372202	FreeBSD : ImageMagick6 -- multiple vulnerabilities (fc4d429d-d0c6-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	Local	medium
371967	Linux Distros Unpatched Vulnerability : CVE-2026-116143	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-116143

medium

Tenable Plugins

medium

medium

medium

medium

medium