Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD6.3 Medium

CVE-2026-56365

ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing

Description

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-19affected
  • 7.1.2-19unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-44affected
  • 6.9.13-44unaffected

References