CVE Database›Document archive›CVE-2026-56376

CVE-2026-56376

ImageMagick: ImageMagick: Denial of Service via heap use-after-free vulnerability

Loading…

Severity

Low

Red Hat Product Security

3.7

CVSS 3.1

Review impact separately from score.

Published · June 23, 2026

Updated · August 19, 2026

Description

A flaw was found in ImageMagick. Remote attackers can exploit a heap use-after-free vulnerability in the meta coder by processing specially crafted image files. This can lead to a denial of service.

Statement

This ImageMagick flaw is rated as Low impact. A heap use-after-free vulnerability in the meta coder can lead to a denial of service when processing specially crafted image files. The impact is limited to availability, and the attack requires specific conditions, making successful exploitation less probable in typical Red Hat deployments unless processing untrusted images.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Since this vulnerability is isolated entirely within ImageMagick's meta coder, the mitigation is to disable that specific coder.

CVSS / CWE

CVSS 3.1 · 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-825 · Expired Pointer Dereference