PT-2026-51783 · Imagemagick · Imagemagick

Ylwango613 · Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-56368

Mitre

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2026-56368

Produtos afetados

Imagemagick

Referências · 2

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc · Aviso do Fabricante
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-raw-pixel-data-coders · Nota