Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD4.8 Medium

CVE-2026-56366

ImageMagick - Memory Leak in META Reader APP1JPEG Error Path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-18affected
  • 7.1.2-18unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-43affected
  • 6.9.13-43unaffected

References