PT-2026-57176 · Imagemagick · Imagemagick

Unbengable12 · Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-56366

NVD

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2026-56366

Produtos afetados

Imagemagick

Referências · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-56366 · Nota de Segurança
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-meta-reader-app1jpeg-error-path · Nota