CVE-2026-56375CWE-401

ImageMagick - Memory Leak in ASHLAR Coder Action Failure

Medium · published July 15, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-07-15T11:25Z
EPSS history
Timeline
  • 15 JUL 11:25Z
    ImageMagick - Memory Leak in ASHLAR Coder Action Failure
    cvelistv5