CVE-2026-56373
ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption.
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 10, 2026
Updated · July 14, 2026
Description
A flaw was found in ImageMagick. This use-after-free vulnerability (CWE-416) exists within the PDB (Program Database) decoder. A remote attacker could exploit this by tricking a user into processing a specially crafted malicious PDB file. This could lead to a denial of service (DoS) due to application crashes or potentially allow for a single zero-byte write to freed memory, resulting in limited data corruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
CWE-825 · Expired Pointer Dereference