CVE-2026-56368

A flaw was found in ImageMagick. This memory leak vulnerability exists in multiple coders that write raw pixel data, where allocated objects are not properly freed. A remote attacker can exploit this by processing specially crafted images, leading to memory exhaustion and a denial of service.

A memory leak exists in ImageMagick's raw pixel data coders. Processing specially crafted, untrusted images can exhaust system memory and cause a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Modify the ImageMagick security policy file (policy.xml, typically located in /etc/ImageMagick-7/ or /etc/ImageMagick-6/) to disable the processing of RAW pixel data formats.