CVE-2026-56368CWE-401

ImageMagick - Memory Leak in Raw Pixel Data Coders

Medium · published June 24, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-06-24T11:53Z
EPSS history
Timeline
  • 24 JUN 11:53Z
    ImageMagick - Memory Leak in Raw Pixel Data Coders
    cvelistv5