CVE-2026-33852

7.5

High

Published:24 Mar 2026

Last updated:17 Jun 2026

Source:cve_disclosure@tech.gov.sg

Analyzed

Weakness (CWE)

CWE-401Missing Release of Memory

CVSS Vector

v3.1

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

View on MITRE Find PoC on GitHub

Description

Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.

References

cve_disclosure@tech.gov.sg

https://github.com/MolotovCherry/Android-ImageMagick7/pull/191