CVE-2026-56366: ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specia

lowCVSS 3.3CVE-2026-56366

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: low — CVSS 3.3
Published: 2026-07-10
Last updated: 2026-07-10
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-56366

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-56366	coverage & exploitation status	NVD · CVE.org

Recent advisories for ImageMagick

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

lowCVE-2026-56373: ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that us…nvd · 2026-07-10
medium[UPDATE] [medium] ImageMagick: Multiple vulnerabilitiescert-bund · 2026-07-09
low[UPDATE] [low] ImageMagick: Multiple vulnerabilities allow Denial of Servicecert-bund · 2026-07-09
lowCVE-2026-56374: ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder …nvd · 2026-07-08
lowCVE-2026-56362: ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelInde…nvd · 2026-07-08
medium[UPDATE] [medium] ImageMagick: Multiple vulnerabilitiescert-bund · 2026-07-08

CVE-2026-56366: ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specia

Details

Referenced CVEs

Recent advisories for ImageMagick

More from NVD Recent CVEs