CVE-2026-56365CWE-401
ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing
Medium · published June 30, 2026
What it is
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service.
The record
Technical detail
- CVSS v4.0
- 6.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00284 · 19.9th percentile
- Weakness
- CWE-401 · Missing Release of Memory after Effective Lifetime
- Published
- 2026-06-30T22:08Z
EPSS history
Timeline