CVE-2026-56376
ImageMagick: ImageMagick: Denial of Service via heap use-after-free vulnerability
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 23, 2026
Updated · August 19, 2026
Description
A flaw was found in ImageMagick. Remote attackers can exploit a heap use-after-free vulnerability in the meta coder by processing specially crafted image files. This can lead to a denial of service.
Statement
This ImageMagick flaw is rated as Low impact. A heap use-after-free vulnerability in the meta coder can lead to a denial of service when processing specially crafted image files. The impact is limited to availability, and the attack requires specific conditions, making successful exploitation less probable in typical Red Hat deployments unless processing untrusted images.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Since this vulnerability is isolated entirely within ImageMagick's meta coder, the mitigation is to disable that specific coder.
CVSS / CWE
CVSS 3.1 · 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-825 · Expired Pointer Dereference