PT-2026-51783 · Imagemagick · Imagemagick

Ylwango613 · Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-56368

NVD

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-56368

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56368 · Security Note
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-raw-pixel-data-coders · Note