PT-2026-60118 · Imagemagick · Imagemagick

Unbengable12 · Published 2026-07-15 · Updated 2026-07-15 · CVE-2026-56375

Mitre

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-56375

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p22-q7w5-33pg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56375 · Security Note
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-ashlar-coder-action-failure · Note