PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-56366

CVE-2026-56366

ImageMagick: ImageMagick: Denial of Service via memory leak in APP1JPEG image processing

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · July 10, 2026

Updated · July 14, 2026

Description

A flaw was found in ImageMagick. This vulnerability, categorized as a memory leak (CWE-401), occurs in the META reader when processing APP1JPEG input paths. A remote attacker could exploit this by providing specially crafted APP1JPEG image files. Successful exploitation leads to resource exhaustion, resulting in a denial of service (DoS) for the affected system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime