PT-2026-57176 · Imagemagick · Imagemagick

Unbengable12 · Published 2026-07-10 · Updated 2026-07-10 · CVE-2026-56366

NVD

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-56366

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56366 · Security Note
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-meta-reader-app1jpeg-error-path · Note