PT-2026-54044 · Imagemagick · Imagemagick

Ylwango613 · Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-56365

NVD

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-56365

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x928-4434-crqj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56365 · Security Note
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-png-encoder-via-mng-image-writing · Note