CVE-2026-56366

lowCVSS 3.3covered by 1 sourcefirst seen 2026-07-10

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

⚡ Watch CVE-2026-56366

Get an email if CVE-2026-56366 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

lowCVE-2026-56366: ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when proce…nvd · 2026-07-10

External references

NVD record for CVE-2026-56366

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-56366 status](https://www.csirts.com/badge/CVE-2026-56366)](https://www.csirts.com/cve/CVE-2026-56366)